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Sun Joins OpenAJAX, Dojo 



Contributes jMaki creator, whose 
framework brings Java into the mix 



BY ALEX HANDY 

Satisfied that the OpenAJAX 
Alliance is not tied to Eclipse, Sun 
Microsystems announced in mid- 
June that it would join the organi- 
zation, an effort kicked off in Feb- 
ruary by IBM and others to 
promote the use of AJAX methods 
and techniques for rich-client 
Web development. 

To the effort, Sun will allocate 
the services of Greg Murray, cre- 
ator of jMaki, a method of wrap- 
ping JavaScript for use in Java 
applications as either a JSP tag 
library or a JSF component. The 
result is a series of AJAX wid- 
gets — for use with components 
from Yahoo, Google and oth- 
ers — that share a common inter- 
face, and can be used together 



on the same page. 

Sun also has signed onto the 
Dojo Foundation, an nonprofit 
organization dedicated to pro- 
moting use of the Dojo open- 
source JavaScript toolkit. 

The first order of business for 
Murray, Sun's new AJAX archi- 
tect, was to sit down with the 
OpenAJAX Alliance and under- 
stand the issues being addressed. 
One of those issues was a lack of 
interoperability among the more 
than 100 AJAX frameworks avail- 
able in the marketplace. 

Murray said that some of the 
problems OpenAJAX was trying 
to solve fell right in line with his 
work on jMaki. "I found I was 
doing the same things over and 
► continued on page 22 




jMaki wraps JavaScript with JSP or JSF to create AJAX widgets. 



How the Weblnspect Intelligent Engine Works 

Old process: Blindly send/ static attacks and hope far a hil 
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New Intelligence on Way 



N w procau Us& ink-iHrjcnca Id tt.ir| Ittigh 




■■*«** w* g 



j^h W.»w .ypAifr iwfl w 



' - a 3CsLnF^ :-:LrilDrtj , ahnch n ^3C. > tcrlp< , A3E 




Source: SPI Dynamics 



SPI Dynamics Weblnspect 6.0 aims to craft testing attacks more intelligently. 
This release probes for cross-site scripting. Future releases are expected to 
support SQL injections and AJAX auditing. 



BY JENNIFER DEJONG 

As Web hackers remain high on 
the corporate watch list, tool 
makers continue to make head- 
way on software for writing apps 
that are harder to attack. 

Atlanta-based SPI Dynamics 
last month unveiled new ver- 
sions of its Weblnspect and 
Devlnspect offerings, providing 
a first look at the direction in 
which its tools are headed. And 
IBM announced two appli- 
cation security technologies 
developed at its research lab, 
which may find their way into 



future offerings. 

New to Weblnspect 6, SPI's 
so-called black-box testing tool, 
is the ability to craft potential 
attacks more intelligently, pro- 
ducing more accurate results 
with fewer false positives, said 
company president and CEO 
Brian Cohen. Black-box, or pen- 
etration, testing simulates the 
ways in which a hacker might 
attack a Web application, in 
order to pinpoint where poten- 
tial vulnerabilities lie. But that 
approach is often haphazard. 
► continued on page 14 



Patent Issues 
Stir Debate 

Public review system could 
relieve property woes; 
Congress not likely to act 

BY ALEX HANDY 

SAN FRANCISCO — The back- 
log of nearly 1 million software 
patents pending has lawyers, 
industry representatives and gov- 
ernment officials struggling to 
find consensus as to how to fix 
what they see as a broken U.S. 
patent system. 

Among the issues that bubbled 
to the surface during a panel dis- 
cussion at the recent Supernova 
2006 conference here were that 
many frivolous patents are cur- 
rently granted, and that the exten- 
sive time it takes to grant a patent 
makes many of them obsolete 
before they are even approved. 
This, coupled with the highly 
► continued on page 24 




Associate law professor Beth Simone 
Noveck proposes a ranking system 
for patent applications. 
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Robotics Seen as 'The Next Stage of the PC 

Microsoft hopes to set the bar with preview of development tools 



BY P.J. CONNOLLY 

Microsoft unveiled a Communi- 
ty Technology Preview of its 
forthcoming Robotics Studio at 
the RoboBusiness Conference 
and Exposition 2006 in Pitts- 
burgh last month, marking the 
company's entry into the emerg- 
ing field. Robotics Studio is 
designed to support applica- 
tions ranging from academic 
and hobbyist interests all the 
way up to the industrial robots 
that have become common- 
place in modern manufacturing. 

The Robotics Studio project 
has taken a couple of years to get 
this far, according to group gen- 
eral manager Tandy Trower. He 
noted that until now, there's 
been no standard for software 
development in this area. 
According to Trower, robotics 
supporters in academia and 
industry alike expressed a strong 
desire to see a company such as 
Microsoft step up to the plate. 

Trower compares the cur- 
rent evolution of robotics to 
that of the PC around 1977, 
with the people who could be 
building applications having to 



focus on plumbing. But he sees 
a market in robotics that's just 
about to take off: "Robotics are 
the natural next generation, the 
next stage of the PC." 

The new Microsoft environ- 
ment offers visual programming 
tools that allow programmers to 
create modular services for both 
hardware and software, and sup- 
ports Web-based and Windows- 
dependent interfaces. Realistic 
3-D modeling uses the PhysX 
simulation engine — licensed 
from Ageia — which allows real- 
world physics simulations. For 
more demanding simulations, 
Ageia offers hardware-based 
acceleration through an add-on 
"physics coprocessor" card. 

Robotics Studio supports the 
development of autonomous 
and remote usage methods, 
which can be developed with a 
variety of languages; in the CTP, 
these are limited to Microsoft's 
JScript, Visual C#, Visual Basic 
.NET and the beta of Iron- 
Python 1.0. But conforming 
third-party languages also will 
be supported. Robotics Studio 
offers a message-based, service- 
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Robotics Simulation Visualizer allows users to create simulations using predefined entities and services. 



oriented architecture and a com- 
position model that supports 
simple access to actuators and 
sensors, while allowing the cre- 
ation of high-level functions with 
simple, reusable components. 

Robotics Studio isn't simply 
slideware; there were several 
demonstrations of it at the con- 



ference, including Coro Ware's 
Surveyor 3000, a mobile ser- 
vice robot that can operate 
under remote control or semi- 
autonomously, and the 914 
PC-BOT from White Box 
Robotics, controlled via a 
Web-based, remotely accessi- 
ble interface. Other demon- 



strations showcased working 
models from industrially 
focused companies such as 
KUKA Robot Group, Robosoft 
and Robotics Connection. 

The CTP of Robotics Studio 
runs on Windows XP and is 
available for download at 
msdn.microsoft.com/robotics. I 



Sun Opens Doors to Its Lab 

Sensors, interval-based programming top project list 



BY ALEX HANDY 

In early June, Sun Microsys- 
tems opened the doors of its 
research labs in Silicon Valley 
to show off its pet projects, 
which consisted of everything 
from its experimental Fortress 
language for scientific comput- 
ing to home entertainment 
hardware for high-definition 
TV. But while the company's 
hundred-odd researchers were 
explaining cutting-edge tech- 
nology, it was a decade-old 
concept that stole the show for 
developers eager to improve 
their day-to-day lives. 

G. William Walster isn't 
working on social network visu- 
alization, nor on the latest Java 
runtime. Instead, he's been 
plugging away at replacing 
faulty floating point math with 
the wizardry of interval-based 
programming, which Sun first 
added to its Fortran compilers 
in 1995. The company later 
offered interval support for its 
C + + compilers in the form of 






,■ j... i *•?_' 



&■■:■'■ 



J evf J 



&$$> 



iitaajF* 




It, wp? 




Sun researcher G. William Walster is focused on mathematics. 



an external library. 

Walster described intervals 
as ranges of numbers within 
certain bounds that are calcu- 
lated ahead of time. With a 
proper interval given for an 
experiment, resulting equation 
solutions can quickly be shown 
to be correct or incorrect: If the 
number falls within the bounds 



of the interval, it's a correct 
solution. If not, there's some- 
thing wrong with the underly- 
ing code or math. 

FPUs or Floating Point 
Units, were once add-on chips 
designed to specifically deal with 
those massive numbers that are 
boiled down to exponents, such 
as 655321 X 10 A 3. Now, most 



CPUs have these capabilities 
built-in, but the underlying math 
will still only be calculated out to 
a threshold number of digits. 
That means that beyond a cer- 
tain point, all remaining digits in 
the integer are rounded out, 
resulting in a minuscule loss of 
accuracy. 

But Walster said that using 
intervals to replace floating 
point math is still on the 
bleeding edge of the develop- 
ment world. "The big picture 
is to fix technical and scientific 
computing that is currently 
being done with FPU arith- 
metic," said Walster, a bearded 
engineer with a bright smile 
and a passion for math. He's 
referring to the fact that FPU 
calculations are frequently 
rounded off, and that the final 
result of an equation can be 
wrong without any indication 
of its fallacy. 

"The fundamental difficulty 
is [that] FPU numbers have no 
information about their accura- 



cy. We know less about the 
quality of computing we're 
doing now than people did 
about the quality of their com- 
puting done by hand. We can 
check against experimental ver- 
ification and physical measure- 
ments in that, and more and 
more want to use the speed of 
digital computers to replace 
physical experiments that are 
difficult or expensive or impos- 
sible to conduct, and replace 
them with cheap, fast substi- 
tutes. The difficulty is, if you 
know nothing about the accura- 
cy of your computing, there's a 
huge risk involved." 

To combat the problem, Wal- 
ster said that interval support in 
Sun's Fortran and Fortress com- 
pilers treats intervals just like 
any set of real numbers or inte- 
gers. That makes for an easier 
development process. 

Walster also said that inter- 
vals are an important part of 
Sun's Fortress language. "For- 
tress is designed to do for For- 
tran what Java did for C+ + ," 
said Walster. Fortress is also an 
inherently parallel language, 
meaning it takes to clusters 
naturally. And intervals, said 
► continued on page 18 




If your delivery cycle is taking priority over REM cycles, 
Jtest's Automated Error Prevention brings your schedule back to reality. 




Sleeping in your cubicle is no way to stay on 
schedule. You need to test while you work, not after 
everything is done. With Jtest, you'll be home in time 
for dinner. And a little rest. 

Jtest automates the valuable yet tedious task of code reviews 
and unit testing, allowing development teams to adopt a 
"test as you go" strategy. This promotes the testing of code as 
it's developed, so that quality is built into the code from 
its inception. And bugs are eliminated before they infect the 
rest of the code base. 

The result is cleaner, safer, more reliable and consistent code. 
You'll be reworking less code, which means faster and more 
predictable release cycles, reliable applications, and happier, 
more productive end-users. And of course, more sleep. 



i Jtest checks whether code complies with 500+ Java development 
rules and automatically corrects many reported violations. 

i Automatically unit-tests your Java code, evaluating code behavior 
and exposing unexpected exceptions, boundary condition errors 
and memory leaks. 

i Generates extendable, high-coverage test cases in JUnit format, 
which can be quickly turned into libraries of reusable test assets. 

i Improves productivity by helping team members leverage one 
another's test settings and related files. 

i Hundreds of Quick Fix options for fast, accurate error resolution. 

i Reduce the risks that cause late, over-budget, incomplete releases. 
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BEA Charts Course 
For AquaLoqic SOA 



BY P.J. CONNOLLY 

BEA Systems celebrated the 
first birthday of its AquaLogic 
SOA product family last 
month by shipping new versions 
of three members of the suite: 
AquaLogic Service Bus 2.5, 
AquaLogic Service Registry and 
AquaLogic Enterprise Security 
2.2. AquaLogic is designed to 
help developers compose, man- 
age, orchestrate and secure 
Java, legacy and .NET SOA 
components throughout the 
enterprise. 

In addition to the shipping 
news, BEA outlined its Aqua- 
Logic road map, announcing 
plans to deliver AquaLogic 
BPM Suite 5.7 and AquaLogic 
Interaction Process 1.7, which 
will offer BPM project team col- 
laboration features, enhance- 
ments to business process tem- 
plates, and predefined business 
activity dashboards. Further 
down the road, developer tools 
based on the open-source 
Eclipse framework will become 
part of AquaLogic, along with 
dynamic activity support and 
proactive business process opti- 
mization capabilities. 

Paul Patrick, BE As chief 
architect for AquaLogic, said 
that BE As SOA commitment 
has been in the works for a long 
time, and that bringing an 
infrastructure approach to SOA 
was just a natural evolution. 

"People have a difficult 
time, struggling with not just 
the technology but [with] the 
people process issues... it's a 
lot more than running bits," 
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AquaLogic Service Bus 2.5 adds the ability to federate service buses. 



Patrick said. 

BEA, said Patrick, recog- 
nizes that its customers are try- 
ing to create what he called an 
"uber-bus," but instead are 
deploying SOA and service bus 
technologies on a project basis. 
"The reality [is] people were 
going to build this out into a 
series of bus segments; in 
essence, we were going to wind 
up federating buses." 

AquaLogic Service Bus 
(ALSB) 2.5 fills that require- 
ment by adding enterprise ser- 
vice bus (ESB) federation for 



Yahoo Messenger Open to Plug-ins 



BY ALEX HANDY 

Yahoo announced in June that 
a plug-in system will be added 
to its popular instant messag- 
ing platform, giving third-party 
developers the chance to 
extend the IM program with 
their own tools through new 
JavaScript and C++ APIs. The 
news coincided with the 
release of a beta version of the 
new Yahoo Messenger soft- 
ware, which adds a larger 
friend list, a 1GB cap on file 
transfers sent across the mes- 
saging network, and other 
minor enhancements. 



Yahoo also announced the 
first bevy of messenger plug- 
ins, including those for inte- 
grating Yahoo s calendaring and 
other services with the messen- 
ger. Others from Amazon and 
eBay enable developers to tap 
into users' respective wish 
lists and monitor auctions. 
The Yahoo Messenger Plug- 
in SDK is available now at 
developer.yahoo.com/messenger. 
Plug-ins can be created with 
JavaScript, HTML or C++ and 
integrate with any browser- 
based technology, the company 
says. I 



flexible and scalable ESB 
deployments, and governance 
support for operational control 
and reuse. It also protects 
investments in legacy systems 
with greater extensibility and 
adaptive connectivity. 

Patrick went on to note that 
in a hosting environment, most 
of the pieces think that they're 
the center of the universe, and 
pointed to AquaLogic Enter- 
prise Security 2.2, which now 
offers integration with ALSB 
and the WebLogic 9.x platform, 
as a solution. It allows cus- 
tomers to apply a common 
security infrastructure for 
WebLogic-hosted applications 
and resources as well as ALSB 
proxy services. 

The AquaLogic Service 
Registry 2.1 governance tool 
includes an improved GUI, the 
Business Service Console 
(BSC). BSC gives users a 
streamlined approval process 
to increase the efficiency of 
provisioning, as well as search 
acceleration and usability 
enhancement features. Patrick 
characterized the rest of the 
upgrade as adding robustness 
and "cleaning up" in areas such 
as installation. 

The new AquaLogic compo- 
nents are available now. I 




News Briefs 

COMPANIES, 




Sun Microsystems has combined its radio frequency identification 
RFID Test Center with its Advanced Product Testing (APT) laboratory. 
Sun's new APT Lab for RFID and Sensors will be located at Sun's exist- 
ing APT facility in Longmont, Colo. 



NEW PRODUCTS 



Raining Data has released TigerLogic FastSOA, a midtier data and 
service cache that is an add-on to SOA environments. It accelerates 
access to data because it avoids the ^ 

problem associated with trying to get a / 

concentration of requests through a 
small number of data access services. By caching data in native XML 
format either in memory or on disk, TigerLogic FastSOA responds 
quickly to XML requests and does not require XML-to-object or XML- 
to-relational data transformations. 
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UPGRADES 



Codign Software has released CoView 2.0, an Eclipse plug-in 
that automatically creates JUnit tests and measures coverage. 
Improvements include a new user interface, test manager, an 
advanced JUnit editor and the ability to measure path and branch 
coverage. It supports Eclipse 3.1, Java 1.4x and Java 1.5 .. . Code- 
jock Software has announced Xtreme ToolkitPro 2006 Vol 2, a 
combination of nine components, and SuitePro 2006 Vol 2, eight 
components, for Visual Studio .NET . . . Version 5.2 of Mindreef 
SOAPscope Server (previously Mindreef Coral), for testing and 
verifying SOAs, has been made available by Mindreef. Included is 
expanded operating system support, broader database implemen- 
tation, support for Microsoft Internet Explorer 7 and Firefox 1.5, and 
support for LDAP. Other features include the ability to reserve 
licenses for a community port or for utilizing an API . . . AdaCore 
has released its latest edition of GNATbench, which integrates Ada 
into native Eclipse. GNATbench lets Eclipse users access the GNAT 
Pro Ada development environment. GNATbench was originally 
developed for Wind River's Eclipse-based Workbench development 
suite to facilitate multilanguage development . . . Turbosoft has 
released TurboFTP 5.0, an FTP client for Windows. TurboFTP 
allows users to connect to a regular or secure FTP server and 
transfer files between them. Added features include a Folder 
Synchronizer that provides visual comparisons of local and remote 
directory contents, TurboLogViewer and an Upload Wizard, a light- 
weight approach to uploading files and directories to FTP or SSH 
servers without having to open the main TurboFTP program 
. . . Stylus Studio has announced the availability of Stylus Studio 
2006 Release 3 XML Enterprise Edition, an XML integrated 
development environment. It supports DataDirect's XQuery 2.0 
implementation, and includes a new XPath 
Query Editor for multiline editing and new 
Y i j s Java AP| s for the Stylus Studio XML 
Deployment Components. It also supports 
the Saxon 8.7.1 XSLT and XQuery processor . . . Serlio Software has 
made available Case Complete 2.5, a Use Case and requirements 
management tool. In version 2.5, detailed project requirements can 
be specified at the same time Use Cases are being developed. It 
also leverages the Use Case data by generating test plans directly 
from the information specified in the cases . . . Absoft has released 
Absoft Fortan Compiler 10.0, working with 64-bit Windows XP and 
Windows Compute Cluster Server 2003 running on Intel Xeon 
and AMD Opteron processors. It is compatible with Absoft 32-bit 
Pro Fortan 9.0 for Windows, and developers can migrate existing 
32-bit applications to 64-bit Windows . . . LEAD Technologies has 
released version 15 of its LEADTOOLS Multimedia development 
kit. New capabilities include DVD burning, authoring and conversion 
capabilities, new DirectShow filters such as LEAD ISO Multiplex- 
er/Demultiplexer and AAC encoders, and a new still image format: 
PSP thumbnail. ► continued on page 17 
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Filling the Gaps in the Microsoft Ecosystem 



BY DAVID RUBINSTEIN 

BOSTON — As Microsoft 
begins to pay more than lip ser- 
vice to interoperability with 
other systems, collaboration by 
workers in different locations 
and the ideas of rich Internet 



applications and virtualization, 
the software giant is leaving 
room for some of the gaps in its 
.NET platform to be filled by 
other tools providers. 

At the recent Tech-Ed con- 
ference, held here in June, many 



of those companies 
were on hand, show- 
ing solutions that 
cover a wide range 
of areas, including testing, clus- 
tering and data management. 
Claiming to be the only soft- 
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SHOW REPORT 



ware-as-a-service play 
that can synchronize 
data, logic and rules 
across devices and 
users, Adesso Systems an- 
nounced it had released to beta 
its AppsNow Market software 



Introducing Charting, redefined. 
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with the intention of having it 
ready some time this month. 

The problem with the dis- 
tributed services model, 
according to founder and CEO 
John Landry, is that applica- 
tions are only intermittently 
available, there is poor respon- 
siveness, and they are not cus- 
tomizable. Adesso s distributed 
application platform handles 
replication and security auto- 
matically, easing development 
of distributed applications. For 
example, Landry said an Adesso 
user could quickly build an 
application in Excel and have it 
distributed through Adesso, 
which can replicate all the data 
underlying the apps in a distrib- 
uted database. 

BMC released version 6.0 of 
App Sight, the black-box testing 
tool it acquired with the pur- 
chase of Identify Software in 
May. Enhanced monitoring, 
which now allows end users to 
define what a problem is in a 
running application, is among 
the new features. New wizards 
help users step through the cre- 
ation of an application recording 
profile, and then set triggers to 
change the recording profile to 
gain more information about a 
particular threshold, according 
to Lori Wizdo, BMC's industry 
program director of the transac- 
tion management business unit. 

Also new in AppSight 6.0 are 
preconfigured problem-solving 
workflows, making it easier for 
nonexpert people to trou- 
bleshoot applications, Wizdo 
explained. Integration with Visu- 
al Studio 2005 and Team System 
lets developers look at black-box 
log files from within the IDE as 
well as to go right to the line of 
code that's a problem and fix it 
from within the IDE. Wizdo 
indicated that BMC will likely 
eliminate both the AppSight and 
Identify brands after a 12- to 18- 
month transition period. 

DevPartner Studio 8.1, 
Compuware s updated suite of 
code quality tools, was unveiled 
at Tech-Ed with Visual Studio 
Team System integration as well 
as the ability to embed Com- 
puware's System Comparison 
Facility in an application via a 
newly released SDK. The Team 
System integration allows better 
collaboration by enabling defect 
work items to be sent directly to 
the Team Foundation Server. 
Also, the stack analysis capability 
in the suite has been extended, 
► continued on page 23 
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Novell Reveals Identity of Bandit 

Open-source identity architecture matches XML with old T LAIM' 



BY P.J. CONNOLLY 

Novell bestowed upon the open- 
source community in recent 
weeks a new entry in identity 
management, the Bandit Pro- 
ject. Bandit builds on Novell's 
years of experience with net- 
work identity and complements 
the Higgins Trust Framework, 
the user-centered identity man- 
agement scheme that IBM, 
Novell and Parity Communica- 
tions helped launch in February, 
which is now managed by the 
Eclipse Foundation. 

Novell Distinguished Engi- 
neer Dale Olds described Bandit 
as "our storefront to the commu- 
nity, our vehicle to contribute to 
the larger effort. We view our 
role as not to design any new 
protocols, [but] to implement 
protocols." Olds was careful to 
make it clear that although Ban- 
dit is starting with Novell tech- 
nology, it's meant to work with 
any LDAP implementation. 
"The goal is. . .to take these con- 
ceptual functions . . . authentica- 
tion, role calculation, audit- 
ing... making sure they work 
from any identity source no mat- 
ter what method is used." 

The Bandit architecture con- 
sists of five open-source compo- 
nents. A so-called Common 
Identity — with roots in the Hig- 
gins framework — creates a virtu- 
al object based on identity data, 
which can come from such dis- 
parate sources as a password file, 
an InfoCard, LDAP or a store 
based on the Liberty open- 
source authentication project. 

The Bandit Role Engine 
relies on the Common Identity 
to handle authorization for appli- 
cations in a consistent manner to 
simplify management and provi- 
sioning, and is based on RBAC 
(role-based access control) and 
Xcaml, a syntax extension of 
Objective Caml for Web servers. 
Third is CASA— Bandit's Com- 
mon Authentication Services 
Adapter — which is a secure cre- 
dential manager already avail- 
able in the SUSE distribution 
that enables single sign-on for 
both Linux and Windows. 

All three components gener- 
ate common audit records that 
can be used for policy manage- 
ment and enforcement. Ban- 
dit's Audit Record Framework 
(ARF) supplies an instrumenta- 
tion API that Novell admits is 
minimal, yet complete. 



Web site (www.bandit-project 
.org) by the end of July. 

"Open source as a develop- 
ment model is penetrating from 
the bottom," Olds observed, 
adding the opinion that develop- 

The last bit of Bandit is the Information Management), XML-based XFLAIM as open ers are "more comfortable con- 
database engine. Novell fans which has powered eDirectory source along with the other suming open source from the 
will be pleased to note that it's and Group Wise for years. Nov- Bandit components; all of them outside, than they were [propri- 
FLAIM (Flexible Adaptable ell will release FLAIM and the should be on the Bandit Project etary code] from the inside." I 
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Give Your Users the Complete Picture 

to Help Them Make Better, Faster Decisions. 

Applications that incorporate geographic information system (GIS) 
technology give users a visual way to analyze their data and make 
more informed decisions. With ESRI® developer solutions, you can 
quickly and cost-effectively bring geography and mapping capabilities 
into your applications, regardless of whether you are building desktop, 
client/server, mobile, or Web applications. 

ESRI developer solutions enable you to 

► Quickly and cost-effectively integrate GIS capabilities 
into your new and existing applications. 

► Select the developer tools that fit best with your architecture 
(ESRI's developer products encompass GIS components, 
servers, and Web services). 

► Use the development environment of your choice, including 
Java™, .NET, COM, and C++, and deploy applications on a 
variety of platforms. 

► Access and manipulate data in multiple formats. 

To learn more about the ESRI developer solutions that are right 
for you, visit www.esri.com/develop. 



1-888-288-1277 

www.esri.com/develop 
info@esri.com 
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Population demographics analysis application 




Web-based property management system 





Using GIS components within a commercial IDE 



Copyright © 2005 ESRI. All rights reserved. The ESRI globe logo, ESRI, www.e; 
service marks of ESRI in the United States, the European Community, or certaii 
herein are trademarks or registered trademarks of their respective trademark c 
and Traffic Authority NSW. 
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Flashline SOA Repository Makes Discovery 

Company claims its code store finds and acquires SOA components 



BY ALEX handy automatic service discovery and The company on June 26 and catalog Web services in an 

Software registry and reposito- management capabilities of began shipping Flashline for SOA environment. Future ver- 

ry maker Flashline in mid- June Flashline for SOA, the compa- SOA 5.2, which includes the sions also will tally the Business 

announced plans to expand the ny s SOA suite. ability to automatically discover Process Execution Language 
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(BPEL) information associated 
with those services. 

Charles Stack, Flashline's 
CEO, explained the thinking 
behind the autodiscovery fea- 
ture. "If you go back and look at 
the history of repositories in the 
past, they've tended to be stat- 
ic," he said. "There's a big ini- 
tiative, everyone loads it up, 
and then it gets stale. People 
have recognized the impor- 
tance of a repository for meta- 
data for decades now, but many 
have stalled after the initial 
flurry," said Stack. 

It is for this reason, he said, 
that his company sought to 
change the way repositories 
worked. "We've continually tak- 
en steps to make the repository 
active, not passive. We've 
reached an inflection point 
here, because the repository 
we're shipping today is virtually 
self-sustaining. It loads itself up 
with assets and metadata, then 
maintains current metadata 
going forward," claimed Stack. 

Therefore, the future ver- 
sions of the company's reposito- 
ry, said Stack, will focus on dis- 
covering this meta-information, 
and will use it to better describe 
the software it holds. The 
repository also will be able to 
recognize which components 
are being used frequently, and 
will suggest tools that can be 
added to the repository and 
standardized. 

Flashline for SOA version 
5.2 is available now starting at 
US$55,000, including develop- 
er plug-ins for Eclipse and oth- 
er major IDEs. The software is 
compatible with most Java 
application servers and requires 
a SQL database. A BPEL- 
aware version now in beta is 
available to select testers. I 
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More and more development teams are switching to Seapine's Surround SCM. 

That's because Surround SCM makes the switch easy and gives you more. Surround SCM provides 
you with a richer set of source code management features and a more productive work environ- 
ment than other tools. PKWARE switched from Microsoft® Visual SourceSafe® to Surround SCM 
because of Surrounds rock-solid stability, collaboration capabilities, and usability features. Other 
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Visual SourceSafe®, CVS, or Merant/lntersolv PVCS® to our award-winning Surround SCM. Plus, 
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Joe Sturonas 

Chief Technology Officer 
PKWARE 



"PKWARE wonted a product that wos flexible enough 
to support the multi-platform development we 
require as we move forward to create the next 
generation of data security products. VSS lacked 
the advanced functionality necessary for parallel 
code work. Surround SCM efficiently enables our 
collaborative development process." 



Tom Francis 

Software Architect 
PKWARE 



"Most software configuration management tools 
expect users to conform their processes to the tool, 
and usually involve IT support to implement. 
Surround SCM is sophisticated enough to work 
with our complex development environment and 
Seapine's high level of responsiveness is impressive." 
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SOA Software Forms an ESB Federation 



BY EDWARD J. CORREIA 

The mention of a federation for 
some might stir up images from 
science fiction movies. But with 
the latest edition of its Network 
Director SOA infrastructure 
software, SOA Software hopes 
to beam ESB Federation into 
the enterprise. 

Defining ESB Federation is 
Ian Goldsmith, SOA Software's 
vice president of product mar- 
keting: "You get a product that 
drives interoperability between 
different messaging standards 




Network Director should work with 
any XML-based ESB, according to 
SOA Software's Goldsmith. 



and provides governance capa- 
bilities." 

The result, he said, is a sys- 
tem that converts SOAP, JMS, 
MQ and other message proto- 
cols of disparate ESBs into a 
single unified protocol. "This 
allows those products to com- 
municate and interoperate effi- 
ciently and reliably," he claimed. 

Governance is provided by 
SOA Software s Service Manag- 
er, which is now integrated with 
Network Director, the service 
mediation technology the com- 
pany acquired along with Blue 
Titan in May. "If you deploy 
Service Manager, you can have 
all the ESBs interoperate in 
terms of policy enforcement. 
[Service Manager] ensures that 
messages comply with policies 
and can only be accessed by 
authorized users," he said. 

ZapThink analyst Ronald 
Schmelzer said that such a fed- 
eration mechanism can help 
companies consolidate dis- 
parate ESB implementations. 
"SOA Software is aiming to 
bring the industry closer to the 
vision of truly loosely coupled, 
composable and abstracted ser- 



vices that move us away from 
integrating islands of IT func- 
tionality," he said in a June 19 
news release announcing the 
product s general availability. 

Goldsmith said that while 
the release is "not a big leap 
from what we were doing 
before," he claimed that this 
combination of capabilities 
had not been offered before 
in a single tool. "Network 
Director will now contain the 
ability to enforce, decrypt, 



encrypt, authenticate and cap- 
ture usage information in a sin- 
gle proxy that delivers all these 
capabilities." 

Pricing for Network Direc- 
tor and Service Manager 
together starts at US$100,000 
per server processor, including 
Eclipse-based developers tools. 
Service Manager, which still 
will be sold separately starting 
at $50,000 per server proces- 
sor, provides a Web services 
infrastructure for security, 



management and monitoring, a 
UDDI registry and metadata 
repository. 

Goldsmith said that in theory, 
Network Director will work with 
any XML-based ESB. Tested 
systems include Apaches Ser- 
viceMix, BEAs AquaLogic, 
Ionas Celtix, Microsoft's Biz- 
Talk, Progress Softwares Sonic- 
ESB and TIBCO's Business- 
Works. Compatibility with 
solutions from IBM and Oracle 
are planned next, he said. I 



IBM Compiles Catalog of SOA Assets 



BY JENNIFER DEJONG 

IBM aims to do for the widely 
dispersed SOA community what 
the Yellow Pages does for local 
purveyors of goods and services. 

The company announced last 
month the SOA Business Cata- 
log, which lets business analysts, 
architects and developers search 
online for software code and 
best practices advice, said Sandy 
Carter, vice president of Web- 
Sphere and SOA for IBM. 

Software offerings include 
assets such as adapters, essen- 



tially precoded connectors that 
ease the job of integrating pro- 
jects with SAP or Oracle appli- 
cations, among others, she said. 
Adapters typically cost about 
US$24,000. 

Best practices offerings 
include industry-specific sample 
modeling projects, such as those 
that map out the steps involved 
in applying for a mortgage, or 
underwriting an insurance poli- 
cy, for example. The sample pro- 
jects, which typically start at 
$100,000, are designed to plug 



into WebSphere Business Mod- 
eler, said Carter. They are also 
available on paper to those who 
don't use IBM's tool for model- 
ing business processes, she said. 
Sixty percent of the catalog's 
offerings are free, she added. 

The catalog — available at 
catalog.lotus.com/wps/portal 
/wbi — can be searched by 
industry, or by solutions such as 
business process management 
or supply chain management, 
and includes offerings from 
IBM partners. I 
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Event Processing Pits Young Against Restless 



BY EDWARD J. CORREIA 

Companies young and old in 
late June placed bets on com- 
plex event processing, technol- 
ogy intended to divine wisdom 
by examining application events 
as they occur in real time. 

Oracle last month released 
its Event- Driven Architecture 
Suite, a new bundle of previous- 
ly existing tools based on its 
Fusion middleware. The tools 
deliver business activity moni- 
toring for event and pattern 
analysis; an ESB for routing and 
distribution of events between 
applications; an edge server, 
which captures, filters and man- 
ages events from edge devices 
and automated systems; enter- 
prise messaging with quality-of- 
service; and a business rules 
engine to control event routing. 

According to Oracle, the 
solution for Linux and Windows 
is compatible with Oracle s own 
J2EE application server as well 
as JBoss, WebLogic and Web- 
Sphere. Supported messaging 
busses include Oracle's Ad- 
vanced Queuing, SonicMQ, 
TIBCO Enterprise JMS and 
WebSphereMQ. Pricing was 
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Source: Coral8 

The Coral8 Server accepts SQL-like commands and returns alerts or actions. 



not disclosed. A free download 
is available at www.oracle.com/ 
goto/eda. 

Meanwhile, Coral8, a start- 
up based in Mountain View, 
Calif., had its coming out on 
June 26 with the Complex Event 
Processing Engine, which it 
claims simplifies application 
development by using SQL-like 
commands rather than requiring 
proprietary languages. 

According to Coral8 founder, 
president and CTO Mark 
Tsimelzon, one area that could 
benefit from complex event pro- 
cessing is automated stock trad- 
ing. "If one stock goes up and an 



option for that stock goes down, 
or if one goes up and another 
goes down, you may want to buy 
or sell based on those activities," 
he said. 

The technology also could 
help save on annual losses due 
to fraud sustained by credit card 
issuers, which Tsimelzon said 
currently use complex algo- 
rithms to detect theft based on 
patterns of past behavior. "Com- 
panies are trying to do this in 
real time because they look at 
lots of data and transactions 
across different properties but 
can only find fraud historically." 

The key to Coral8 s technolo- 



gy, and its ability to compete with 
established companies such as 
TIBCO, according to Coral8 
CEO Terry Cunningham, will be 
its ability to apply to any industry. 

"What we've done with the 
technology is a horizontal play," 
said Cunningham, who was 
founder of Crystal Decisions, an 
enterprise reporting tools com- 
pany acquired by Business 
Objects in 2003. "Anybody in any 
vertical [market] that has a real- 
time data challenge can solve it, 
just like database vendors did 
decades ago. They didn't care 
what the application was." 

And like database tools, the 
Coral8 Server and its Complex 
Event Processing Engine rec- 
ognize a SQL-like language 
built within Coral8 Studio, a 
stand-alone environment for 
FreeBSD, Linux and Windows 
that Tsimelzon said is modeled 
after Visual Studio. "The people 
we're dealing with are data peo- 
ple; I would be shocked if they 
didn't know SQL," said Cun- 
ningham, adding that a similar 
model was used in Crystal 
Reports, "which had millions of 
users," he claimed. 



Coral8 Studio apps generate 
queries that are fed to the run- 
time engine, which returns alerts 
or actions. "You have streams in 
and commands and streams 
out," explained Tsimelzon. 

"For example, if you have a 
trading app, you would get a buy 
or sell action. For fraud, you can 
suspend someone's account or 
block actions across a firewall," 
he said. The solution includes 
adapters for major systems, 
including JDBC/ODBC, JMS, 
TIBCO and XML/SOAP 

Custom adapters can be built 
in Studio using C/C++, Java, 
.NET languages, Perl or Python. 
"It takes about one to two hours 
to build an adapter," claimed 
Tsimelzon. 

Deployment pricing starts at 
US$20,000 per server processor; 
a full-featured version of the 
Coral8 Server and Coral8 Studio 
is free for development and 
available now at www.coral8 
.com/developers/download.html. 
A like-priced enterprise version 
also is available, and adds state 
persistence, and clustering for 
failover, performance and load 
balancing. I 
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New Open Messaging Protocol Announced 



new u|ien mettdijiiiij n uiuuui hiiiiuuiiucu 

Multivendor group says AMQP forms middleware 'missing link' 

BY P.J. CONNOLLY developing and defining an open Advanced Message Queuing ing members: Cisco Systems, 

A new messaging protocol is messaging standard that the Protocol (AMQP) Working Envoy Technologies, iMatix, 

under development by a multi- group says will form a "missing Group was announced last Iona Technologies, JPMorgan 

vendor working group, aimed at link" in todays middleware. The month in London by its found- Chase, Red Hat, Twist Process 
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Innovations and 29 West. 

John O'Hara, vice president 
and distinguished engineer at 
JPMorgan Chase, explained that 
the lack of a defined communi- 
cation standard was retarding 
development of SOA-based sys- 
tems. "Large firms can't really 
bet on service-oriented architec- 
ture; [it] can't really come to full 
fruition until there is a ubiqui- 
tous, reliable. . .transport. There's 
no sign of the market being will- 
ing to open up, join together and 
make such a thing." 

JPMorgan Chase is already 
"dogfooding" it in a global trad- 
ing system deployed across 
three data centers. The current 
version, 0.8, has been separately 
implemented by Envoy, iMatix, 
Iona, Red Hat and Twist, and 
according to the working group, 
all of these implementations are 
fully interoperable. When the 
1.0 specification is final — 
expected around late 2007 — 
AMQP will be submitted to a to- 
be-determined standards body. 

O'Hara outlined why the 
financial services giant became 
involved: "We wouldn't be 
involved in this if we could just 
go and get this off the shelf, or 
if someone else had already 
invented it. The authors of the 
work spent a long time check- 
ing the marketplace to see if 
there was any work that could 
be opened up or if there was 
anything in existence that does 
the same thing." He cited a 
community consensus that cur- 
rent middleware products, such 
as those from Microsoft and 
TIBCO, fall far short of the 
mark on interoperability. 

AMQP is designed to work 
with current messaging and 
Web services specifications, 
including JMS, SOAP and a 
number of the protocols 
defined in WS-* series specs. 
AMQP consists of a messaging 
model — made up of compo- 
nents that route and store mes- 
sages within a broker service 
and rules for connecting the 
components — and a wire-level 
protocol that allows other 
applications to interact with 
the broker. 

When asked about alterna- 
tives to AMQP, O'Hara argued, 
"We think we have a protocol 
that's definitely useful from a 
business perspective. . .. We don't 
believe that there is a compara- 
ble protocol in the industry." 

Products based on AMQP 
will be available later this year; 
more information on the spec is 
available on any of the imple- 
menting members' Web sites. I 
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More Team Smarts for Team Pro 



Alexsys emphasizes collaboration, security for development projects 



BY JENNIFER DEJONG 

Alexsys has bolstered its project 
management tool, claiming to 
improve security and collabora- 
tion capabilities with the 
release last month of Team Pro 
2.8, the Stoneham, Mass. -based 
company's project management 
and collaboration software. 

Team Pro, which starts at 
US$295 per seat, is used to run 
complex projects such as soft- 
ware development, defect 
tracking and other efforts that 
require large teams to work 
together, said Alexsys president 
and founder Rich Bianchi. 
New to this release is the abili- 
ty to "flag" an unlimited num- 
ber of tasks, allowing one team 
member to alert another about 
an issue that needs to be dis- 
cussed, for example. 

Also new is the ability to add 
a virtually unlimited number of 
new fields, enabling teams to 
customize the offering. Better 
integration with Microsoft Out- 
look allows team members to 
"drag" an e-mail message into 
Team Pro, without having to 
copy and paste, said Bianchi. 
"Now the e-mail message is 
part of the task history." 

The updated offering works 
with Microsoft SQL Server (ver- 
sion 7 and higher), mySQL (ver- 
sion 4.2 and higher) and Oracle 
(version 8 and higher). Team 
Pro 2.8 replaces two earlier ver- 

Fortran Now 
In VS 2005 

BY ALEX HANDY 

In early June, the Portland 
Group released a beta preview 
of PGI Visual Fortran (PVF), 
the company's 64-bit parallel 
Fortran development suite, 
which now integrates with 
Microsoft Visual Studio 2005 
and promises compatibility 
with Microsoft Windows Com- 
pute Cluster 2003. 

PVF includes the Portland 
Group's OpenMP auto-paral- 
lelizing compilers for Fortran 77 
and Fortran 95. The Visual Stu- 
dio integration adds text high- 
lighting and recognition as well 
as debugging capabilities for 
Fortran code into Microsoft's 
environment. General availabili- 
ty is set for Aug. 15. The preview 
edition can be downloaded at 
www.pgroup.com. I 



sions — Team 2 and Team- 
SQL — and competes with offer- 
ings from IBM Rational and San 
Mateo, Calif.-based Serena, 
according to Bianchi. The com- 



pany also announced it is offer- 
ing Alexsys Team FreePack, a 
free single-user installation. 

Team Pro 2.8 now supports 
multiple administrators, com- 



pared with one in the previous 
versions. And it also allows 
those administrators to apply 
security policies to e-mail 
attachments. 



"For instance, you can speci- 
fy that Team Pro accepts doc 
files from the Windows version 
of the software but not from the 
Web interface," said Bianchi. 
It's important to exercise securi- 
ty policies, he said. "All you 
need is an [executable] that 
comes from the Web. Run it 
and you're dead." I 



"Calling SlitkEclii an editor 
is like calling the F-16 a single-seat airplane." 



W^ St^s-^rtS 



CAD Development Software E-^ineer 




Now that's slick thinking. 



Htt at STickEdit, «e often think only one thing & slicker than our software-trie 
rfttfflwrs rtho UH- it. Frjf riwf than lB^tf. 0lk riu li-lan^ctf (ftMelopment 10* 
and advanced code editors have supported the world's- most skiled professionals, 
wither they're developing on Window, imu^ LrhalX, or Msc OS. We knu* that our 
products enaok fatter, more accurate coding. Apparency, our users tftmk so too. 



slick^dit. 



vo w uv.slickedit com 



Sec what you think. Download a FREE trial at www.ilickeclitcom/trial or call 1,800.334.3348. 
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New Intelligence in App Security War 



< continued from page 1 

"You try a whole bunch of 
attacks and see if they work," he 
said. "You find things that seem 
to be vulnerable, but perhaps 
they aren't exploitable." 

SPI has taken a first step in 
overcoming that problem by 
building logic into the Webln- 
spect engine, said company 
founder and CTO Caleb Sima. 
The engine does that by send- 
ing a partial request to an 
application, prior to crafting 
testing attacks. 

"You could start by sending a 
greater-than or less-than sign. If 
it rejects that, [you send] no 
more requests with the greater- 
than or less-than sign. Next, you 
might try the equal sign," he 
said, offering an example. The 
idea is to systematically deter- 
mine what's allowed and what's 
not, in order to tailor fewer but 
more relevant tests based on 
how the application has reacted 
to earlier requests. "More intel- 
ligent probing reduces false 
positives," said Sima. 

SPI is adding that intelli- 
gence to Weblnspect one 



m 



-- V. II ■■ - IS- 1™ 

|£«Rapii: It 1 1 ■ "il II 




■ 
■ 




i-.t- "■— — A- 



■lull- I 
Trr* ir 




■ r -rl-l-rf ^H 



* • 'i i *; 

# ! IKMm 

■ i i'bv .■■■■. 

« ■ • —v.- 

W ■ %w r— 'w 

# ■ - 1 :#VW ■■•-*■* 

# I » ^H M TPP 

■ 



" 



, 



Underlying SPI Dynamics Weblnspect 6.0 is an intelligent engine that 
helps development teams craft attacks, for testing purposes, based on 
responses to previous reguests. 



attack at a time. With its XSS 
Intelligent Engine, 6.0 sup- 
ports cross-site scripting 
attacks, where hackers attempt 
to execute malicious scripts. 
The company will add an intel- 
ligent engine for SQL injec- 
tions, where hackers attempt to 



gain access to back-end data- 
bases, later this summer. Next 
on the list is AJAX auditing, 
said Cohen. Further details 
were not made available. But 
he said that the "intelligent 
probing" theme will be central 
to future releases. 



Future releases are also 
expected to take a "hybrid" 
approach to application securi- 
ty, he said. Hybrid offerings 
combine black-box testing with 
source code analysis, in a single 
user interface, he explained. 

SPI's first hybrid offering is 
Devlnspect 2005, which plugs 
into Microsoft Visual Studio 
2005. The dual approach not 
only provides more complete 
security coverage, said Sima, 
but also allows teams to use 
source code analysis results to 
guide black-box testing. "Vul- 
nerabilities found during 
source code analysis are veri- 
fied against running applica- 
tions during black-box phase." 

ALPHAWORKS UPDATE 

IBM researchers have readied 
two offerings for Java develop- 
ers: a data encryption library, as 
well as a tool that makes it easy 
to manage permissions in an 
application. Available on alpha- 
Works, IBM's emerging tech- 
nology Web site, both offerings 
aim to help developers build 
business applications that are 



more secure from their incep- 
tion, said Chris Spence, an 
emerging technologies strate- 
gist for IBM. The technologies 
may be incorporated in com- 
mercial tools from IBM, he 
said, but further details were 
not made available. 

IBM Secure Shell Library 
for Java is essentially a library 
that lets developers add secure 
transfer technology to enter- 
prise applications, without hav- 
ing to write the encryption 
code themselves, or rely on the 
File Transfer Protocol (FTP). 
The library is particularly use- 
ful for developers writing 
health-care or financial ser- 
vices applications, where 
securing patient records or 
customer account data is criti- 
cal, said Spence. 

The second offering, Securi- 
ty Workbench Development 
Environment for Java, is a col- 
lection of Eclipse plug-ins 
designed to help developers 
writing Java applications man- 
age permissions, he said. It 
does that by performing static 
analysis of the application 
to determine, for example, 
whether a Java Archive file is 
trying to write files to your hard 
drive, said Spence. I 




Surround SCM gives you more advanced source code management 
and version control capabilities than competitive products. 

• Powerful productivity tools such as advanced branching, 
Guiffy compare/merge, automated triggers, and more 

• Team-based collaboration and communication including 
automatic change notifications, detailed change history, 
and flexible repository options 

• Seamless integration with TestTrack ™ Pro and a wide variety 
of development and build tools 

• Scalable, cross-platform client/server support for team 
deployment on Windows®, Solaris®, Linux®, and Mac® OS X® 

• Low cost of ownership means easy to install, use, and maintain. 
No administration is required. 

Accelerate your development effort today! Download your FREE fully 
functional evaluation software now at www.seapine.com/sdtsscm 
or call 1-888-683-6456. 
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offering a FREE named user 
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Microsoft® Visual SourceSafe®, 
CVS, or Merant/lntersolv PVCS® 
to our award-winning Surround 
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SCM tool? 
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FX for Visual Studio 2005 



The Most Tightly Integrated Data Visualization 
Tool Available for Visual Studio 2005 

Evidence of this is the Smart Tag Wizard that exposes many of the properties to 
select and display in real-time. There is also a Data Wizard which allows you to 
quickly connect to a data source, map specific fields to the chart and instruct the 
chart how to use the data. The new API was designed with the Visual Studio 2005 
object model in mind to make it easier to access complex functionality. Chart FX for 
Visual Studio 2005 adds a DHTML rendering engine that uses the AJAX 
(Asynchronous JavaScript and XML) web development technique to produce chart 
images that allow full interactivity and support state in web applications. The new 
Extensions Manager standardizes the infrastructure for using the Chart FX 
Extensions, such as financial, statistical, maps and OLAP, among others. The Chart FX 
Resource Center provides a "Programmer's Guide", the Chart FX API, an Internet 
Reference and a wealth of samples and charts (with code). Learn more about the 
seamless integration and powerful features at www.softwarefx.com. 
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SD Times 1DD Winner's Profile 



TIBCO Software 





Business process management can be the closest thing to anar- 
chy many in the world of enterprise applications ever encounter. 
However, TIBCO Software, named to the 2006 SD Times 100 in 
the SOA St Integration and BPM categories, turns that mass of 
data into a manageable set of functions and procedures that will 
make any development team breathe a little easier. 

"BPM is all about increasing operational efficiency and effec- 
tiveness through the modeling, execution and the optimization 
of business processes," says Jeff Kristick, senior director of prod- 
uct marketing. "BPM software allows organizations to build 
process-centric applications that leverage the existing IT assets 
they have in place. It enables developers to rapid- 
ly build and deploy these applications and ulti- 
mately put the process control in the hands of 
the right person: the business process owner." 
The TIBCO BPM Suite includes several components 
that help developers and business users build applica- 
tions focused on processes. It includes a modeling and sim- 
ulation environment for process definition, a service cre- 
ation and management environment for integrating with 
systems, and a visualization and reporting module for analy- 
sis. These model-driven, team-oriented and standards-based 
products are designed to accelerate development. 

TIBCO is focused on leveraging and extending the 
capabilities of its software to help companies move 
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100 



toward a predictive means of business that lets them 
anticipate customer needs, create opportunities and avoid poten- 
tial problems. As the basis of the real-time movement of data across 
the enterprise, TIBCO's software is capable of correlating informa- 
tion about a company's operations and performance with infor- 
mation about expected behavior and business rules so they can antic- 
ipate and respond to threats and opportunities before they occur. 

"We offer an independent and technology-neutral approach to 
BPM," he says. "We don't lock our customers into a specific data- 
base, operating system, app server or any other technology, and 
most importantly, we allow them to leverage and extend the exist- 
ing assets they already have. Our modular and scalable offering lets 
organizations start small, while immediately benefiting from an 
architecture and approach that lets them add capabilities as their 
needs grow. Our solutions are backed by an architecture and back- 
bone that is built for performance. We design our products to han- 
dle 'the three Vs' of increasing velocity, variety and volume." 

TIBCO has been delivering business process solutions since 
before they were even called BPM. The company has over 1 5 years 
of experience, over 800 customers, and over 500,000 end users 
worldwide. 
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Fortify Software 





Fortify Software's products protect companies from the threats 
posed by security flaws in business-critical software applications. 
Its products, Fortify Source Code Analysis Suite, Fortify Security 
Tester, Fortify Application Defense and Fortify Software Security 
Manager, drive down costs and security risks by automating key 
processes of developing and deploying secure applications. 

As Mike Armistead, a Fortify co-founder, explains, "Fortify is 
the de facto leader in software security code analysis and the only 
vendor to offer products that cover three critical phases of the life 
cycle." Fortify was named to the 2006 SD Times 100 in the Software 
Security category. 

During development, Fortify Source Code Analysis 
identifies vulnerabilities in applications and pro- 
vides information to prioritize and fix important 
issues quickly. Fortify Security Tester turns functional 
tests into security tests, so that QA teams can judge how 
applications perform under attack, and Fortify Application 
Defense monitors and protects running applications from 
attack. Then, Fortify Software Security Manager pulls it 
all together, letting managers track trends, compare projects 
and collect key performance metrics. 

Fortify's products fit into and enhance existing audit 

and development processes, no matter the methodolo- 

gy-from XP to classic Waterfall-and support many 

languages, such as Visual Basic, C/C++, C# and Java. 
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More than 75 customers in multiple industries, 
including financial services, manufacturers and ISVs, use Fortify's 
products. "The depth to which our products reach to obtain securi- 
ty problems makes them easier for developers to take action on," 
Armistead says. "Their comprehensiveness is also a key factor in 
their value. We don't just tell you that you have a problem; we help 
you fix it. We believe that software security requires multiple tech- 
nologies at various phases of the life cycle." 

Fortify turns exposed and vulnerable software into fortified 
applications able to withstand attack, using patent-pending tech- 
nology that strengthens software "inside out" rather than the "out- 
side in." In addition to detecting and removing security vulner- 
abilities and insulating apps from attack, Fortify's solutions track 
progress and compliance across projects. 

"Our company is comprised of people that have combined 
expertise in software development and security," says Armistead. 
"Fortify is backed by leading investors, including Kleiner, Perkins, 
Caufield 8t Byers, and a world-class team of software security 
advisors and partners." 

Armistead concludes, "We help customers turn security poli- 
cies into secure code, secure code into secure applications, and 
secure applications into secure business processes at runtime." 

FORTIFY 

SOFTWARE 



ADVERTISEMENT 



www.fortifysoftware.com 
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Letting Developers Control 
The Fabric of App Life Cycle 

Appistry framework applies policies 
for grid execution, persistence 



BY EDWARD J. CORREIA 

Companies using Appistry s Enterprise 
Application Fabric grid infrastructure to 
improve application performance and 
availability now can have control of how 
and when the workload is executed 
across the fabric. 

The company in mid-June intro- 
duced a framework for its EAF that it 
says permits the assignment of policies 
that can force tasks to gain high priority, 
to be persistent or to be limited to a cer- 
tain number of instances, according to 
Sam Charrington, Appistry s vice presi- 
dent of product management and mar- 
keting. The company demonstrated the 
new capabilities at Gartner's Application 
Integration and Web Services Summit in 
San Diego last month. 

The ability to control and schedule 
workloads in real time, said Charrington, 
allows developers to fine-tune the grid 
to accommodate CPU-intensive applica- 
tions. "A big stumbling block had been 
the ability to handle time-critical appli- 
cations, not just large-scale ones," Char- 
rington said of the enhancements in the 
latest software. "We have customers 
doing large-scale analytics and image 
processing," which he said led Appistry 



to add the capability. "They needed to 
be able to achieve predictability and 
dependability because of the time-criti- 
cal nature of their apps." 

Charrington explained how each of 
the three included policies works: "[The] 
exclusive [policy] is for work that's CPU- 
intensive. It ensures that the fabric isn't 
trying to do multiple tasks on that 
resource at that time." The persistent 
policy, he continued, allows the creation 
of services that are launched and remain 
running along with the grid. "This arose 
from customers saying they like the abil- 
ity to create services that are hosted and 
[to] make sure they're always in place." 

The limited policy guarantees that an 
application will execute no more than a 
specified number of times. "This is use- 
ful for when you're trying to throttle 
access to external systems like databases 
or when you're trying to limit the num- 
ber of instances of a third-party software 
for licensing reasons." 

Now at version 3.0, Appistry Enter- 
prise Application Fabric for Linux and 
Windows on Intel and AMD costs 
US$3,750 per server processor per year, 
up from $1,950; volume pricing starts at 
five nodes. I 
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< continued from page 5 

Susan Boers has been named president of Telelogic North America. Boers has been at 
Telelogic, where she held the position of SVP of sales, since 1994. She will be responsible 
for managing Telelogic sales and professional services operations for the division 
. . . Siperian has named Peter Caswell as CEO. Previously he was CEO of Advent Software, 
after holding several executive positions, including COO, SVP of sales and marketing, and 
VP of field operations. He replaces Darlene Mann . . . InterWest Partners has added Bruce 
Cleveland to the firm as a partner. Cleveland was an original member of the Siebel exec- 
utive team where he held several positions, including SVP and GM of products . . . The 
Association for Computing Machinery has announced the election of Stuart I. Feldman 
to the position of president for a two-year term. Also elected to two-year terms were VP 
Wendy Hall, professor of computer science at the University of Southampton, U.K.; and 
secretary-treasurer Alain Chesnais, VP for product development at Tucows of Toronto 
. . . Steve Madigan has been appointed VP of corporate development for Altiris. Madigan 
previously worked for Peregrine Systems and Microsoft . . . rPath has hired Brett Adam 
as VP of product development. He previously served as CTO and VP of engineering for 
Versata . . . Chris Benedetto has joined Solstice Software as VP of marketing. Before join- 
ing Solstice, Benedetto was VP of marketing and business development for ePIus and also 
the senior director of strategy and planning for the Uniform Code Council. 



STANDARDS 
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The OASIS international standards consortium has announced that its members approved 
the Emergency Data Exchange Language Distribution Element (EDXL-DE) version 1.0 
as an OASIS standard, a status that signifies the highest level of approval. EDXL-DE facil- 
itates emergency information sharing and data exchange across local, regional, tribal, 
national and international organizations in the public and private sectors. I 
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Using Atalasoft Imaging Toolkits your business can create applications that save 
time and money. Our .NET imaging components are designed exclusively for the 
Microsoft .NET Framework, offering developers Photographic and Document 
imaging for web and windows based applications featuring AJAX-enabled web 
imaging, PDF support, data capture, scanning/OCR, barcode reading systems, 
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Sun Offers a Look Inside Lab Efforts 



< continued from page 3 

Walster, are embarrassingly 
parallel computations. 

Sun is continually applying 
intervals to new projects, said 
Walster, who is frequently asked 
to speak to teams hoping to use 



them in their algorithms. 

One such application is in 
airplane flight controls. Walster 
said that control surfaces in air- 
planes are frequently at risk of 
succumbing to feedback loops 
that can get them stuck in place. 



With intervals applied during 
the development cycle of the 
algorithm for those controls, the 
feedback loops can be avoided 
because the interval graphs all 
possible equation results. Those 
results that would cause a fatal 



loop can be identified ahead of 
time and prevented from 
appearing in the field. 

SPOTTING INNOVATIONS 

Elsewhere in the labs, Sun 
showed off its Sun SPOT (Small 
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Create powerful Digital Dashboards using Advanced 
Data Visualization solutions from Dundas! 

Dundas Chart, Dundas Gauge and Dundas Diagram offer the Latest 
award winning technologies th.it Fortune 500 companies across the 
globe tru&t to create advanced Dashboard applications. 
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Technologies 



Programmable Object Technol- 
ogy) sensors, little gadgets that 
were stuck to walls and scat- 
tered across the desks of almost 
all the Sun researchers. Sun 
Spots include a number of sen- 
sors and lights in their compact 
bodies. They can detect 
motion, wireless traffic and 
light, giving developers a new 
tool for experimenting with 
sensor integration. 

Sun SPOTS run on the 
Squawk JVM, a flash-resident 
CLDC 1.1 virtual machine 
developed in the labs under the 
direction of Sun senior vice 
president Glenn Edens. The 
Squawk JVM was also demon- 
strated during the Labs' open 
house, and the Sun SPOTs have 
proved to be a fertile testing 
bed for it. 

But Sun's research labs are 
not focused entirely on devel- 
oper tools and programming 
improvements, and Michael 
McGuire, research vice presi- 
dent looking at mobile content 
for the Gartner Group, believes 
that Sun's entertainment-relat- 
ed projects could be the key to 
its future. 

"Search technologies and rec- 
ommendation technologies need 
to get better if we want to see 
digital media grow," said Mc- 
Guire, adding that Sun's projects 
to find similar music, movies 
and books based on search crite- 
ria are an innovative way to 
improve the Internet's digital 
media offerings. McGuire also 
said that Sun's video and movie 
server technologies could push 
hardware sales. 

McGuire said that few peo- 
ple purchase downloadable 
movies online, but believes that 
in the future, this is sure to 
change, and that Sun's movie 
serving technologies solve very 
real problems that face the 
online video downloading world. 

"In the end, what these all 
have in common is they need a 
lot of big servers to make them 
work. So I think that you've 
got to give the executive lead- 
ership props for researching 
this as opposed to just contin- 
ually cutting costs and mining 
the same old veins," said 
McGuire. "The thing is, the 
script isn't done for how this 
evolves: not just for Sun, but 
in general. A lot of the [media] 
industries themselves are 
going through major changes. 
If Sun can create that link 
between the industries and 
themselves, they'll succeed. 
But it's going to be a slog. It 
could be painful." I 
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Seeing the Logic of Centralized Application Management 

OpenLogic Enterprise 4 graduates from the desktop to the server, adds companywide auditing 



BY EDWARD J. CORREIA 

With the latest release of its 
namesake tool for managing 
software use, OpenLogic now 
gives organizations the ability to 
track and audit open-source 
software installations across the 
enterprise. 

OpenLogic Enterprise 4.0, 
which began shipping on June 
26, also adds 18 products — 
including Java LDAP and 
Apache's Axis, Geronimo and 
POI projects — to its library of 
certified and supported pack- 
ages, which now lists more 
than 160. 

According to Stormy Peters, 
OpenLogic's director of prod- 
uct management, with prior 
versions of the software, instal- 
lation packages resided on a 
single machine, usually a devel- 
oper's workstation. "[Organiza- 
tions] could control what devel- 
opers got, but didn't have a 
repository that they could audit 
from a central point," she said. 

"Libraries are now main- 
tained on a server," she contin- 
ued. "This gives IT people the 
ability to install and keep an 
audit trail. They get more man- 
agement control over what goes 
out to the enterprise, and they 
can track what's been installed 
where." 

Version 4 also provides enter- 
prise control of what's in the 
library and what's being 
installed. OpenLogic stacks can 
contain a mixture of open- 
source and proprietary compo- 
nents. When updates to a com- 
pany's maintained open-source 
packages occur, its central server 
is made aware and automatically 
downloads the latest version. 

DOUBLE DUTY 

When updates to user worksta- 
tions are required, version 4 
now permits the installation of 
multiple versions of the same 
software to be installed on the 
target machine. This helps 
users to compare old and new 
versions or migrate data to a 
new release without first 
removing an old one. 

"Even though many of our 
largest enterprise customers 
have continued to increase 
their use of open-source soft- 
ware, they have also been 
telling us that controlling the 
use of hundreds of open-source 
solutions is a time- and labor- 
intensive process," said Open- 



Logic CEO Steven Grand- 
champ, in a statement that 
accompanied the release. 

For companies making the 
move to version 4, Peters said 



OpenLogic will come to the 
customer site and install and 
configure the central server 
(on Linux or Windows). Cus- 
tomers may install their own 



open-source, proprietary or 
commercial software pack- 
ages. Pricing, which is 
unchanged from prior ver- 
sions, varies based on the 



number of users and packages. 
A typical enterprise installa- 
tion can cost US$100,000 or 
more. The upgrade is free to 
current subscribers. I 
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by LEAD Technologies 

Extend and simplify the .NET framework and 
GDI+ with LEADTOOLS. Support for over 1 40+ 
file formats including TIFF, JPG, J2K*, PDF*, and 
GIF using various compression schemes like 
JPEG, JPEG2000, LZW, CCITT G3/G4, and CMP. 
Scan, capture, 200+ image processing filters, 
high speed display (resize, rotate, quality 
controls), and much more. Lots of sample 
source code to get you started quickly! 

*Requires plug-in 

www.programmers.com/lead 

c-tree Plus® 
by FairCom 

With unparalleled performance and sophistication, 
c-tree Plus gives developers absolute control over 
their data management needs. Commercial 
developers use c-tree Plus for a wide variety of 
embedded, vertical market, and enterprise-wide 
database applications. Use any one or a combina- 
tion of our flexible APIs including low-level and 
ISAM C APIs, simplified C and C++ database 
APIs, SQL, ODBC, or JDBC. c-tree Plus can be used 
to develop single-user and multi-user non-server 
applications or client-side application for FairCom's 
robust database server — the c-treeSQL™ Server. 
Windows to Mac to Unix all in one package. 

www.programmers.com/faircom 

AIIFusion® ERwin® Data Modeler r7 
Plus 1 Year Enterprise Maintenance 
byCA 

Introducing AIIFusion® ERwin® Data Modeler r7, 

rising to the challenge of successful information 

management starts with optimal database design. 

Enables visualization of complex data structures, 

inventory information assets and establishes 

enterprise-wide standards for managing data. 

Automates the design process and synchronizes 

the model with the database design. Use this 

product to design transactional systems, data 

marts and data warehouses in one integrated 

environment. Enhanced "out of the box" support 

for Oracle 10g/9i. 

www.programmers.com/ca 

WebWorks ePublisher Pro for Word 

by Quadralay 

Online Help Power Tool 

Easily deliver professional content for six 
different online Help systems, plus eight 
standard online formats. Efficient XML-based 
processing and an intuitive workflow 
streamline content production for the 
Web, cross-platform online Help, portable 
devices, and PDFs. 
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Word Processing Components 

TX Text Control is royalty-free, robust and 
; powerful word processing software in reusable 
j component form. 
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Xtreme ToolkitPro 2006 
by Codejock Software 

Xtreme ToolkitPro 2006 provides the most compre- 
hensive set of fully customizable user interface 
components for the development of Microsoft® style 
applications for use with Microsoft Foundation Class 
(MFC) and Microsoft .NET development platforms. 
Newer Features include: 



► SkinFramework Control 

► Report Control 

► Calendar Custom Print 

► Calendar Reminders 

► Office 2007 Style 
Ribbon Control 



Multi-Edit 2006 
by Multi Edit Software 

Speed, depth, uncompromising program access, 
Multi-Edit 2006 provides a great tool for your 
programming arsenal. Search with definable 
filters & Perl 5 Regular Expression support. 

i BCDiff by Scooter Software enhances ME's file 
■ comparing. Other features are integration with 
i ImageMagic, Delphi 2006, C++ Builder 2006, 
• Visual Studio 2005 and code beautifying support 
: for 15 languages. Handle over 50 languages 
including Ruby. 
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DevTrack 6.0 
Powerful Defect and 
Project Tracking 
by Tech Excel 

DevTrack, the market-leading defect 
and project tracking solution, compre- 
hensively manages and automates 
your software development processes. 
DevTrack features sophisticated 
workflow and process automation, 
seamless source code control integration 
with VSS, Perforce and ClearCase, robust 
searching, and built-in reports and 
analysis. Intuitive administration and 
integration reduces the cost of deploy- 
ment and maintenance. 
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/n software Red Carpet™ Subscriptions 
give you everything in one package: 
communications components for every 
major Internet protocol, SSL and SSH 
security, S/MIME encryption, Digital 
Certificates, Credit Card Processing, 
ZIP compression, Instant Messaging, 
and even e-business (EDI) transactions. 
.NET, Java, COM, C++, Delphi, every- 
thing is included, together with per 
developer licensing, free quarterly 
update CDs and free upgrades during 
the subscription term. 
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Keynote Speaker 



Mike Milinkovich is the executive director of the 
Eclipse Foundation. In the past, he has held key 
management positions with Oracle, WebGain, 
The Object People and Object Technology 
International Inc. (which subsequently became 
a wholly owned subsidiary of IBM), assuming 
responsibility for development, product 
management, marketing, strategic planning, 
finance and business development. 

Mike Milinkovich, 
Executive Director, Eclipse Foundation 




At EclipseWorld, you will... 



• Learn how to save money and improve developer 
productivity with Eclipse. 

• Improve team collaboration using Eclipse-based tool sets. 

• Go beyond the IDE to understand the wide range of Eclipse 
technologies. 

• Get deep inside Eclipse's open-source architecture. 

• Discover the best, most effective Eclipse add-ins and plug-ins. 

• Learn how to build better applications using the Eclipse RCP. 



The industry's independent conference for 
and IT development managers using 



"It's a really good place to get those questions 
answered which are hard to find in books." 

Farha Azaz, Senior Software Engineer, TouchNet Information Systems 

"Great instructors and very good 
environment, very casual and enjoyable." 

Tim Condron, Business Analyst, Spectra East 



"If you are looking for both high and low level 
information regarding Eclipse, both as an IDE 
as well as an RCP, you'll find it at EclipseWorld. 
The presenters are knowledgeable and approachable. 
In addition, the networking with other users of the 
Eclipse platform is invaluable." 

Dan Colbert, Product Manager, CompassCom 



"Well organized and enjoyed 
the presentations." 

Alice Chan, Software Engineer, CyberAccess 



"Good sessions on the basics as 
well as plug-ins." 

Patricia Timms, Senior Software Engineer, Kodak 



Developers from 30 states and 17 countries 
attended EclipseWorld 2005! 
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Are you ready for Eclipse? 

Whether you're an Eclipse master, just getting started 
with the platform, or trying to decide if Eclipse 
technologies are right for your development team, 
the EclipseWorld Conference & Exhibition is the 
#1 educational event that you should attend this year. 




The Enterprise 

Development 
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Hyatt Regency Cambridge 



enterprise software developers Boston, MA 
Eclipse tools and technologies September 6-8 



Technology being discussed in the conference 


"EclipseWorld had a great collaborative 
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"Great place to find out 
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atmosphere. It was exciting to learn about 


developers of all kinds." 


the latest Eclipse info." 


myself with projects 1 hadn't had a chance 
to research." 


the different uses of Eclipse, and see what 
people were creating with it." 


Suzanne Yoakum -Stover, 
Senior Computational Scientist, SAIC 


Kelly Hart, Manager, 
Special Projects, IFMC 


James Pitts, Director of Database Programming, 
Embarcadero Technologies 


Justin Stern, Software Engineer, Auspice 


"EclipseWorld was dynamic, thought 
provoking and cutting-edge." 

Robert Rothman, Senior Developer, Morgan Stanley 
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EclipseWodcl 2005 




{{The Eclipse Foundation is proud to participate in the second 
I annual EclipseWorld conference in September 2006. 
The debut 2005 EclipseWorld in New York was an excellent 
educational event for enterprise IT professionals. We're glad 
that the Eclipse community has embraced this independent 
technical conference." 



Register Now For 
Early Bird Savings! 



Mike Milinkovich, Executive Director, 
Eclipse Foundation 



^d 



A BZ Media Event 



BZ Media is an Associate Member of the Eclipse Foundation. 



/jF% 



Diamond Sponsor 

1 COMP0WARE4 m 

vwvw.compuware.com ^l|§i§^ 
Platinum Sponsor 



Gold Sponsors 

openmake KPARASOFT 

a product of ., ata | S t CSSSSmSS 



Sybase 



Silver Sponsor 

"Instantiations 



^ACTUATE. 



Media Sponsors 

Software Test 



w 



Software Test J1C1 TPSF 
& Performance -E* ^** ^ 

J SOHWaPe ^JEE? Methods & Took "S™-*«— 



www.eclipseworld.net 






22 



NEWS 



Software Development Times . July 15, 2006 . 



www.sdtimes.com 



Sun Joins OpenAJAX Alliance, Dojo Foundation 



< continued from page 1 

over again to wrap JavaScript. I 
did this for my own good. I 
found as I did more of these, it 
worked very well at exposing 
Dojo or Scriptastic. It seemed to 
work quite well because you can 



drag and drop a tag into your Alliances pool of tools, Murray 

said that it's a match made in 
heaven. "The committee I'm 
working with is interested in 
compatibility with all the frame- 
works. It just so happens jMaki 
works with all of these already. 



page, and you can do it while it's 
running. jMaki also provides 
hooks to connect back to your 
service as well," said Murray. 

Now, with his work being 
added to the OpenAJAX 



It's been my job for the last six to 
eight months to make them work 
together. I'm excited because it's 
kind of doing my job for me." 

jMaki is available at ajax 
.dev.java.net. 

Dan Roberts, director of 
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marketing for developer tools at 
Sun, said that working with IBM 
in the OpenAJAX Alliance has 
not resulted in any animosity. 
"I'd almost call it a pragmatic 
approach. We want to get work 
done, and it makes sense for us to 
work together. The classic elbow 
throwing that's taken place in the 
past doesn't benefit either party, 
even if they're right," he said. 

"[From] a developer per- 
spective, it's great," added Mur- 
ray. "I really like working with 
the IBM people. We all want to 
see Dojo become better. I'm 
going to be working with them 
on internationalization and doc- 
umentation also. Those are two 
things IBM has been putting a 
lot of work into." 

When asked why it took four 
months for Sun to join the 
Alliance, Roberts cited the orga- 
nization's unclear goals that were 
set early on. "These organiza- 
tions came together to organize 
patterns and to ensure there's 
interoperability between them, 
[and they had] some broader 
goals [such as] patent-free and 
royalty-free IP," he said. "In the 
early days of the OpenAJAX 
alliance, that initial message was 
lost in the other activities that 
were done. It was launched on 
Eclipse. Initially, it didn't seem 
like the right thing for us to join. 
We weren't sure what the goals 
were. After talking to IBM and 
the other members, it became 
clear that the group's goals had 
nothing to do with Eclipse." 

JDK HAS JAVA DB r MATISSE 

In other news, Sun announced 
that the next edition of the Java 
Developer Kit will include Java 
DB, Sun's version of the Apache 
Derby database project, as well 
as the Matisse GUI builder, 
made popular in NetBeans. This 
news was part of the larger 
release of the second beta of the 
Java SE 6 platform in late June. 

Java DB also factors heavily 
into Sun's plans for Java SE 6. 
The database has a footprint of 
2MB and is ideal for embed- 
ding directly into applications. 
Sun says that the Java DB elim- 
inates the need to exit the JVM 
for database-held information. 

On the graphical side of the 
new JDK, the Matisse GUI 
builder was originally included 
with NetBeans and offers tools 
to help developers point and 
click their way to a new inter- 
face for their applications. 

Sun's second preview release 
of the Java Standard Edition 6 
platform is available at Java 
.sun.com/javase/6. I 
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Filling Microsoft Ecosystem Gaps 



< continued from page 6 

so organizations can set and 
maintain their own coding stan- 
dards and best practices, accord- 
ing to Ken Cowan, product man- 
ager in the DevPartner area. 

Compuware also introduced 
Vantage Analyzer, a key part of 
the Vantage 9.9 application ser- 
vice management release that 
can dive deeply into .NET 
applications to get to the root of 
a problem, "even to the point of 
seeing which SQL statement is 
a problem," Cowan said. 

Quest Software showed a 
beta version of Foglight for 
.NET, its application monitoring 
solution that now can collect 
diagnostics in real time from 
applications running on the 
Microsoft platform. Quest "is 
making a big push into .NET 
technologies," said Steve Stover, 
the company's product manager 
for .NET solutions. "It's gaining 
in the enterprise." The company 
also discussed a SQL tuning 
plug-in for Visual Studio, which 
lets developers write SQL state- 
ments and right-click on them to 
ensure the code is optimized, 
according to Kevin Kline, direc- 
tor of technology, SQL Server, 
for Quest. 

SQL tools provider Red 
Gate Software announced the 
free release of SQL Prompt, an 
add-in for SQL Server the com- 
pany claims can ease the cre- 
ation of SQL queries and make 
them more accurate. Version 3 
of the tool, coming out in Sep- 
tember, will not be free. The 
company also was to launch on 
June 30 SQL Backup Pro, a 
recovery tool for SQL server. 
The tool will support 64-bit 
servers and uses military-grade 
encryption to access and man- 
age all server backups. 

ScaleOut Software an- 
nounced the 2.0 release of its 
State Server, a Windows soft- 
ware service that allows certain 
types of data to be stored on 
server farms for high- availabili- 
ty, clustered computing. 

Bill Bain, founder of Scale- 
Out, explained that where server 
farms help with performance, 
business applications running in 
a clustered environment also 
need to have scalable access to 
application data, such as a shop- 
ping cart or session state; Bain 
calls these "workload data." A 
rich API set makes StateServer 
easier for developers to target, 
he said, noting that because the 
server maintains ASP.NET ses- 



sion objects, there are no object- 
relational storage issues to deal 
with, making it "a natural for 
people writing in C#," Bain said 
as an example. Pricing ranges 
from US$1,595 for two servers 
to $49,995 for 64 servers. 



The new version also has 
improvements for farmwide 
recovery, such as self-healing 
through the use of a point-to- 
point "heartbeat" to detect 
host or NIC failure, Bain said. 
"This will cause developers to 



think more of parallel comput- 
ing," he said. 

Statesoft released View- 
Control VS, a plug-in for Visual 
Studio that lets users create 
application simulations in the 
IDE before release. Written 



using Microsoft's Domain Spe- 
cific Language code, ViewCon- 
trol VS uses the diagram editor, 
code and document generation 
and prototyping capability of 
Visual Studio to create and exe- 
cute flow diagrams to ensure 
the application works correctly 
before it is deployed into a pro- 
duction environment. I 
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Public Reviews Could Ease Patent Woes 



< continued from page 1 

publicized Blackberry patent 
infringement case, have pushed 
many to call for a drastic revision 
of the patent process. 

But that doesn't mean that 
everyone on the panel even 
agreed that there was a crisis. 
Wayne Paugh, former chief of 
staff for the United States 
Patent and Trademark Office 
(USPTO), started out the dis- 
cussion by asking if there actu- 
ally was a crisis. He cited the 
fact that 90 percent of patent 
litigation doesn't reach a court- 
room, and that only about 100 
cases go to trial each year. 

The Patent Act of 2005, a 
bill put forth by Rep. Lamar 
Smith (R-Texas), seeks to 
address many of the litigation- 
related issues facing the U.S. 
patent system. But the bill is 
not receiving much attention 
from his fellow elected officials, 
and Paugh stated that it was not 
likely to see a vote before Con- 
gress breaks for the summer. 

Paugh criticized Smith's bill, 
saying it does not address the 
issues surrounding patents pend- 
ing. "Three hundred and eighty- 



five thousand applications are 
filed each year. The patent office 
has no incentive to examine any 
of those. It currently takes 88 
months to examine an interactive 
video patent," said Paugh. 

Paugh went on to suggest 
that a higher-cost, fast-tracking 
system could help fix this prob- 
lem. He said that companies 



From the point of view of start- 
ups, the system is not only bro- 
ken, it's a disaster," said Barr. 

He stated that patent law is 
the only intellectual property 
law that can be enforced even if 
no copying has taken place. He 
said that researching patents to 
ensure that a product doesn't 
infringe is almost impossible. In 




might pay a premium for quick- 
er approval. 

Robert Barr, a former patent 
attorney for Cisco and executive 
director of the Berkeley Center 
for Law and Technology, re- 
butted Paugh's claims of noncha- 
lance, however, by lampooning 
software patents. He said that 
large software companies only 
exert their patent rights as a form 
of mutually assured destruction, 
not unlike the Cold War. 

"I spent many years between 
my software career and Cisco 
career working at start-ups. 



addition, said Barr, the simple 
act of reading a patent can place 
a company at even greater risk 
for an infringement lawsuit. 

CMDRTACO TO THE RESCUE 

An alternative solution to the 
patent crisis should be ready 
for launch in early 2007, and 
doesn't require any action from 
the legislative branch to work. 

Beth Simone Noveck is an 
associate professor of law at the 
New York Law School. She is 
also the director of the Institute 
for Information Law and Policy, 



the school IP think tank. In this 
capacity, she has been tapped by 
the USPTO to help solve its 
enormous backlog. 

"Why not let the community 
give input on finding prior art 
and helping the examiners?" 
suggested Noveck. She is pro- 
posing a pilot program for appli- 
cants who consent to letting their 
applications be published. 

The proposed Peer to Patent 
Project can be viewed at dotank 
.nyls.edu/communitypatent; the 
USPTO has agreed to move for- 
ward with a test of the program. 
"We will launch early next year. 
It will start with software 
patents. IBM has already con- 
sented to have their applications 
be peer reviewed. Microsoft 
has, too, though it's not 
announced yet," said Noveck. 

Noveck's Peer to Patent Pro- 
ject wasn't just her creation. 
One of those involved was 
CmdrTaco, one of the founders 
of Slashdot.org. The result is a 
rating system that likely will 
bear some resemblance to those 
found on that popular portal, 
where comments and postings 
from users can be ranked for 



validity by other users. 

But Noveck is also aware 
that the most likely participants 
in the Peer to Patent Project 
will be the anti-software patent 
crowd that frequents Slashdot. 
She shrugged this off, however, 
by stating that anti-patent 
activists will only help the 
process by digging up prior art 
and posting it to the site. 

Barr remains pessimistic 
about the current state of affairs 
at the patent office. "The other 
day an e-mail floated around 
with a letter from the patent 
office to an attorney that said, 
Tour patent will be examined in 
eight to 16 years.' Whether it was 
real or not, we all believed it," 
said Barr, eliciting a chuckle 
from his audience. 

Barr said he's seen only three 
major innovations in software 
over the past 30 years: the GUI, 
the Web browser and the 
spreadsheet. And none of those 
were patented. Barr concluded 
by saying that it takes a great 
engineer to create a brilliant new 
idea, "but it takes a brilliant 
patent attorney to patent the rest 
of this crap." I 
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Electric Cloud 

In today's application development life cycle, the build process 
often takes too long, eating up time and effort that could and 
should be used in other areas of development. This problem is 
especially evident in the ISV and embedded software markets. 
Speed the build process and you've expedited nearly every aspect 
of getting product to market. If speed is what you need, Electric 
Cloud-named to the 2006 SD Times 100 for Build Management- 
can help. 

"There are three things that we do to help developers in the 
application life cycle," says Mike Maciag, CEO of Electric Cloud. 
"First, we have an overall impact on developer productivity and 
time to market. Second, we have a dramatic impact 
J*^ on the quality of the resulting product. Third, 
we allow developers to use rapid development 
methodologies. The way that we do these things is 
that we eliminate the bottleneck in the software devel- 
opment life cycle that revolves around software builds 
or compiles." 

Electric Cloud's ElectricAccelerator solution slashes build 
times by 10 to 20 times, by allowing compiles to be done 
on massive clusters of inexpensive hardware. Meanwhile, 
Electriclnsight takes the build out of the "black box" to 
allow software developers and engineers to know exact- 
ly what's happening in their compile via a powerful, 
yet intuitive, visual interface. 
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Both solutions fit into any organization and 
process. Coders can compile using gmake, Nmake or Visual Studio, 
with Electric Cloud's systems seamlessly plugged into the existing 
tools. "Our products understand the dependencies among the hun- 
dreds of thousands of files in a build. This allows us to automat- 
ically detect and correct for any conflicts in a parallel build and 
make sure you never run into the problem again," Maciag explains. 

Electric Cloud has so much insight into streamlining the devel- 
opment cycle because its own staff are experienced developers— 
who focus on accelerating the development life cycle because they 
too have felt the pain they are attempting to resolve in the mar- 
ketplace. 

"That's a philosophy that differentiates us and that we think 
about all the time," Maciag explains. "We add value without chang- 
ing the way that people have to work. The way I look at it is 
that there are lots of tools out there that say they are the equiv- 
alent of, 'We can make you a much more articulate person.. .as 
long as you learn how to speak French first.' We're saying that we 
can make your team more productive in your own language. You 
don't have to do things in a different way." With Electric Cloud, 
you simply do them better. 



electrfccloud 



www.electric-cloud.com 
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Shunra Adds Cellular Network Simulation 



BY ALEX HANDY 

Shunra Software added wire- 
less and multiprotocol label 
switching (MPLS) to the list of 
networks that can be simulated 
within its flagship tool, Shunra 
Virtual Enterprise. The compa- 
ny released version 4.5 of Shun- 
ra VE in mid- June, which also 
updates the tool's ability to cre- 
ate Internet traffic for Web 
application testing. 

Shunra VE is a network sim- 
ulation tool that can create a 
virtual environment in which 
networked applications can be 
tested under load and strained 
situations. 

Ami Chai, director of prod- 
uct marketing for Shunra, said 
that wireless applications have 

Syncf usion Puts 
AJAX in Library 

BY NATALIE ITIN 
AND ALAN ZEICHICK 

Syncfusion is helping .NET 
developers exploit rich Internet 
clients with the latest update to 
its Essential Studio component 
library for ASP.NET and Win- 
dows Forms. Version 4.2 of the 
suite adds AJAX support to many 
of its constituent components, 
according to the company. 

New to the component suite 
is Essential DocIO, which 
enables the reading and writing 
of Microsoft Word documents. 

Another new component is 
Essential TestStudio, which 
simplifies automated testing of 
end-user applications devel- 
oped using the suite's grid, 
grouping and toolkit compo- 
nents. All of those products now 
have native support for Mer- 
cury's QuickTest Professional 
automated testing software. 

Syncfusion has also updated 
the entire suite to work with 
Microsoft's no-charge versions 
of Visual Studio, including 
Visual C# 2005 Express Edi- 
tion, Visual Basic 2005 Express 
Edition and Visual Web Devel- 
oper 2005 Express Edition. 
Essential Studio Enterprise 
Edition, which works with 
both ASP.NET and Windows 
Forms, costs US$1,295 for 
binaries only, or $1,995 with 
source code. The company also 
sells Windows Forms and 
ASP.NET editions of the suite, 
and offers the individual com- 
ponents separately. I 



become the norm in most 
enterprises, and that presents a 
unique challenge to the testing 
labs. "Two or three years ago, 
you could deploy an application 
and assume it's going to be 



deployed across a terrestrial 
network. You can't assume that 
now. The main thing that is 
added [in version 4.5] is being 
able to create various profiles 
for the network: a clean signal, 



a high-use signal or even a no- 
line-of-sight signal. The test 
environment is static, but the 
conditions are dynamic as if the 
user is moving. One of our 
clients is deploying WiFi net- 



works in hospitals, and uses our 
product to find out how many 
base stations they need to 
install to be able to reach every 
bed," said Chai. 

Shunra VE 4.5 is out now, 
and costs around US$70,000. 
The solution is appliance- 
based, and is therefore plat- 
form-independent. I 
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once only a select few could 
make sense of your database. 

Then this happens. 



SQL Dependency Tracker™ analyzes your SQL Server databases and rend, 
all their object relationships as a graphical dependency diagram. It will bi 
dependency trees for all SQL Server 2000 and SQL Server 2005 objects a 
track those dependencies between databases - even across servers. 

With SQL Dependency Tracker you can finally SEE your database. Mo _ 
importantly you can also SHOW your database to anyone with a need to know: 
your boss, your system architect, your team. And now that your database can 
speak for itself, decisions get made faster and with greater confidence. 
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If you want to know the impact of imminent changes to your databases - 
before they happen - SQL Dependency Tracker is the simplest and easiest 
way to find out. And as it's been relentlessly tested, you get to save time from 
the word 'Go! 1 . 



Download your free trial from www.red-gate.com/tracker today! 
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Dundas Software 




The broad selection of charts and gauges offered by Dundas 
Software Ltd. more than likely look better, work better, integrate 
better and cut development costs more than enterprise develop- 
ers or ISVs could reasonably accomplish on their own— as demon- 
strated by the company's being named to the 2006 SD Times 
100 for Components, Libraries St Frameworks. 

"Our products let developers easily create customized chart- 
ing and digital dashboard interfaces with advanced visual effects," 
says Troy Marchand, vice president of product development. 
"They also offer unmatched features, such as AJAX implemen- 
tation, animation effects, data manipulation and filtering. They 
are extremely customizable to ensure that devel- 
opers achieve the functionality as well as the 
exact look and feel they need." 
To ensure a smooth implementation, Dundas 
provides design wizards as well as sample environ- 
ments that offer hundreds of examples complete with 
enough code to get developers started. The products 
are for anyone building a .NET application that needs to 
visualize data, or looking to enhance reports in SQL 
Reporting Services. 

Dundas offers two main component sets: Dundas Chart 

and Dundas Gauge, both available for .NET as well as 

for SQL Reporting Services. A third product, Dundas 

Diagram, is a design framework that helps devel- 
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opers visualize business processes in Windows 
Forms and ASP.NET. 

Dundas Chart lets developers add advanced charts to their appli- 
cations and make sense of any type of data. Its data analysis and 
manipulation abilities let users apply built-in formulas to their 
data, filter out data points, handle missing or empty data, and 
group data points. Dundas Gauge is for displaying and monitor- 
ing real-time data using customizable gauge and dial types, and 
can be used for building digital dashboards and other applications 
that monitor key performance indicators or other critical data. 

Dundas Diagram for .NET adds interactive diagramming and 
business charting functionality to Web and desktop applications. 
Built-in data generators let users create tree- and graph-type dia- 
grams from a data source with a variety of routines for various 
layout views. A diagram editor adds drawing features that let 
users customize diagrams and charts to fit their needs. 

"Our goal is to help our clients succeed," Marchand says. "In 
return, we succeed as a company. Our products are a signifi- 
cant portion of our clients' applications, so they must be advanced, 
both technically and visually. To achieve this goal, Dundas offers 
our clients the finest products, and the best technical support 
available." 
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Seapine Software 




Change is a constant in software development, as organizations 
try to better manage processes, promote collaboration among var- 
ious stakeholders, connect geographically distributed teams, meet 
regulatory compliance, minimize risk and deliver quality products 
to market on time. Integration with IDEs, cross-platform compati- 
bility and evolving methodologies further complicate the problem. 
Seapine Software's tools streamline change and quality man- 
agement so you can build better software. As evidence of its achieve- 
ments, the company was named to the 2006 SD Times 100 Awards 
in two categories: Software Configuration Management 8t Change 
Management and in Test, QA 8t Performance Management. 

"Seapine's focus is on creating tools that help 
organizations streamline their software devel- 
opment processes and measurably improve the 
quality of their products," says Rick Riccetti, pres- 
ident and CEO of Seapine. "Our products are feature- 
rich and flexible enough to work in any development 
environment. Since they can be integrated with each oth- 
er and a variety of other popular software development 
tools, every step in the development process feeds critical 
information into the next step, allowing developers to focus 
on developing high-quality software in less time." 

The company's core products are: 
tfk • TestTrack Pro: A cross-platform issue management 
tool that features workflow and process automa- 
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tion, filters and reports, and role-based security 

along with field customizations, integration with a variety of 

development tools, and support for SQL Server and Oracle. 

• Surround SCM: A cross-platform version control tool that offers 
code branching, remote access, and integration into develop- 
ment and build processes. It also supports Unicode and WebDAV, 
triggers and e-mail notifications. 

• QA Wizard: A testing tool that automates functional and regres- 
sion testing of Web, Windows and Java applications. Its script- 
ing language provides object searching and binding, data-driven 
testing support, and validation checkpoints along with batch sup- 
port and remotely managing multiple, simultaneous scripts. 

• Seapine CM: A cross-platform change management tool that 
manages and tracks source code, digital assets, bugs, change 
requests and issues throughout the development life cycle. 

• Seapine SQA: An automated software quality assurance tool 
that tracks defects and related script changes throughout the 
testing process, helping developers and testers track bugs and 
changes, and manage test scripts. 

Seapine's winning strategy seems to have paid off. More than 
7,500 companies worldwide rely on its products to develop and 
test their software solutions. 

ASeapine Software" 

Managing Process, Change & Quality 



Throughout the Enterprise 
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Kelly Takes Ready's Reins at MontaVista 

With a history of buyouts, is new president steering company toward acquisition? 



BY EDWARD J. CORREIA 

It's an option that the new chief would 
not rule out. 

On news last month that Jim Ready, 
founder of embedded Linux developer 
MontaVista Software, was stepping 
down as president, CEO and chairman, 
speculation began to stir about an 
acquisition. 

The rumors can be explained simply 
by looking at the history of Thomas Kel- 
ly, the man chosen as Ready's successor. 
Kelly, who most recently was CEO of IT 
outsourcing company BlueStar Solu- 
tions, oversaw the successful acquisition 
of that company by Affiliated Computer 
Services, a multibillion dollar IT services 
powerhouse. 

Kelly also was CFO at EDA tools 
maker Cadence Design Systems and 
executive vice president of Frame Tech- 
nology, the latter acquired in 1995 by 
Adobe Systems. He has overseen other 
acquisitions and an IPO, and sits on the 
boards of directors of Epicore Software, 
FEI and SendMail. Kelly also is the for- 
mer CTO of semiconductor manufac- 
turer Cirrus Logic. 

"[Kelly] has demonstrated an ability 
to clean up companies and prepare them 
for the next step," said Chris Lanfear, 
director of Venture Development's 
embedded software group. He added 
that the company is clearly driving 
toward what he called "a liquidity event. 
I would bet acquisition," he said. 

Acquisition or not, Lanfear said that 
the move should result in a more disci- 
plined MontaVista in terms of its prod- 
ucts and sales. "They were in a gray area 
for a long time," he said. "I think it is 
important that [MontaVista] have lead- 
ership in place. [Kelly] appears to be 
someone who had experience bringing 
operating discipline to companies." 

While visiting the company's Euro- 
pean sales offices, Kelly found time to 
answer a few questions from SD Times 
via e-mail. 

SD Times: What will be your first orders of 
business as president and CEO? 

Thomas Kelly: We're going to invest 
heavily in our own organic capabilities of 
delivering features, functionality, stabili- 
ty and high-quality commercial-grade 
Linux. But also, we're going to be look- 
ing at a variety of applications and tech- 
nologies that we think are complemen- 
tary to what we're doing with embedded 
RTOSes, and to the markets that we 
think are important. 

I'm not going to go into detail about 
what these technologies are, or where 
I'm going to be shopping. But that's 
something I'm looking at. I'm not likely 
to execute that within the first quarter 
that I'm here, but it's incredibly impor- 
tant, and I'll be talking with my team 





'With successful 
companies, and 
companies that have 
leadership, people 
knock on the door all 
the time. When people 
knock on the door, 
it's because they 
like you and what 
you're doing.' 

-Thomas Kelly CEO, 
MontaVista Software 



about some of the areas that we need to 
look at. 

MontaVista's sales department has been 
criticized as unfocused. Do your plans 
include any cleaning house? 
I know there was some level of confu- 
sion organizationally over the course of 
the last year. I think my arrival here was 
intended to be a significant step toward 
growing this company, and getting it 
focused on how we compete. 

And, I think the number one job of 
any CEO is to build his team. We've got 
a good team. I like what we've got. If we 
need to add resources, we will. I think 
the team here would endorse that as 
well. We're here to win, that's it. If we 
need to add resources to win, we will. If 
we don't, we've got a great team to fight 
with right now as well. I don't have any 
plans right now to hire anyone, and I'm 
not talking to anybody. 
If MontaVista is indeed the industry's 
"leading embedded Linux provider for 
telecom, mobile, and embedded mar- 
kets," as stated in the company's press 
releases, why replace Jim Ready? Wasn't 
he the one that got the company where 
it is? 

Jim has done a remarkable job of bring- 
ing this company to where it is today. He 
deserves great kudos and credit for hav- 
ing initiated this great adventure that we 
call MontaVista today. 

Jim will focus on technology leader- 
ship inside the company, helping us keep 
on-course there. I will take on the role of 
driving and growing this company. 

This is not a transition focused on 
entrenchment. On the contrary, this is a 
transition that's focused on growth, and 
accelerating growth. It's not focused on 
cutting back, but on investing, and dri- 
ving the company forward. So, I'm just 
thrilled to be here, and I'm confident 
that the kinds of things I've done in the 
past are consistent with the kinds of 



things that have to be done here. 
Tom, where you go, IPOs and acguisitions 
seem to follow. There has been speculation 
among industry analysts that you were 
brought in to help prepare MontaVista for 
a public offering or to be acquired. Any 
truth to that? 

What I have found is that with success- 
ful companies, and companies that 



have leadership, people knock on the 
door all the time. When people knock 
on the door, it's because they like you 
and what you're doing, and they 
believe you're playing an important 
part in the marketplace. 

We are not looking for an acquisi- 
tion. We have great financial 
resources... growth in customers... 
growth in revenues, and we will contin- 
ue to invest in this market. End of story. 

Of course, as CEO of a private com- 
pany, I can make those kinds of com- 
ments. I spent most of my career at 
public companies, where I have had to 
be very cautious about any kinds of 
rumors. We are in the business of grow- 
ing a truly standalone company that can 
take advantage of whatever financial 
markets are available — that would 
include public markets, private mar- 
kets, whatever — to finance how we 
build this company. 

It may not all come in the form of 
actually acquiring somebody. You can 
acquire technology, and rights to tech- 
nology, do collaborative work, integrate 
things — there are a variety of strategic 
relationships that fall short of acquisi- 
tions. But acquisitions are on the plate 
as well. I 
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the leading GUI for 
Embedded Systems 




PEG+ - Full Featured Windowing in C++ 

C/PEG - Smallest Footprint in ANSI C 

Royalty Free 

Fast execution speed 

Completely ROM-able 

Delivered with Full Source Code 

Development Tools including 
FontCapture, PEG WindowBuilder, 
and ImageConvert 

Complete set of screen drivers included 

Completely customizable 

Industry leading RTOS Support 

Supports all popular target processors, 
video controllers and I/O devices 

Multi-lingual support - 2-byte character 
sets & UNICODE string encoding 

Event-driven programming model 

Application Design Services 

Knowledgeable and timely support 
to users around the globe 

Now includes a fully licensed version of 
Paint Shop Pro 9 
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GRAPHICS SOFTWARE FOR EMBEDDED SYSTEMS 



WWW.SWELLSOFTWARE.COM 



810-982-5955 



Perforce Software Configuration Management 
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from souk* cod* tc documents, web ccnlenl, and imag* fil« a 
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Perforce 

SOFTWARE 



Download a. free copy of Perforce, no questions cuked, from 
www.peftorce.com. Free technical support is available 
throughout your evaluation. 
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Linux Kernel Turns 15 

Core of open-source OS maturing, 

but still needs work to meet new challenges 



BY P.J. CONNOLLY 
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Fifteen years ago next month, a post 
to the comp.os.minix newsgroup 
launched the biggest transforma- 
tion of the computing landscape 
since Bill Gates saw his first Macintosh 
prototype. 

Who could have thought that the 
low-key announcement that began, 
"Hello everybody out there using 
minix — I'm doing a (free) operating sys- 
tem (just a hobby, won't be big and pro- 
fessional like gnu) for 386 (486) AT 
clones," would lead to what we now 
think of as the Linux ecosystem? 

At the heart of Linux, of course, is the 
kernel. The Linux kernel may be one of 
the few cases where stability doesn't 
mean stagnation. Although major revi- 
sions seem to be out of the question for 
the foreseeable future, the keepers of 
the kernel continue to add support for 
new devices and filesystems at a consis- 
tent rate. Vendors have learned to lock 
their distributions to a minor revision, 
and are dedicating significant resources 
to kernel development. 

PROOF IN THE PROCESS 

Of course, one of the reasons the ker- 
nel's development has been so methodi- 
cal is that Benevolent Dictator for Life 
Linus Torvalds has kept a tight grip as 
the final buck-stopper. As he said in that 
first communique, "Any suggestions are 
welcome, but I won't promise I'll imple- 
ment them." 

Between Torvalds' last word and 
Andrew Morton's role as maintainer of 
the -mm tree — consisting of revisions 
that are proposed for the master tree — 
a disciplined approach 
to integrating new fea- 
tures and functionality 
operates on what has 
come to resemble an 
assembly line. In the 
past couple of years, 
one has come to expect 
a stable kernel release 
every two or three 
months. 

That may sound like 
a lot of churn, and it is, if 
one just has to have the 
most current kernel. But 
in the real world, once 
Linux is installed, it is 







Drivers remain an ongoing struggle 
in kernel advancement, according 



likely to remain in that to OSDL's Hanrahan. 



kernel configuration until the machine is 
decommissioned or repurposed. The 
more critical the machine is to an enter- 
prise, the stronger the disincentive to 
change anything. 

Sticking with a single kernel revision 
isn't good just for the customers. Major 
distributors find that it makes life sim- 
pler to work with one version of the 
kernel in a product cycle. For example, 
Red Hat Enterprise Linux 4 uses the 
2.6.8 kernel, and the next may run on 
2.6.18, according to Red Hat CTO 
Brian Stevens. Likewise, the current 
SUSE Linux (10.1) runs on top of the 
2.6.16 kernel. 

It used to be the case that a number 
of kernel development trees existed in 
sort of a leapfrog fashion, where the 
2.2 and 2.4 kernels were considered 
"stable enough" for production use, 
and the 2.3 and 2.5 series were prelim- 
inary takes of the 2.4 and 2.6 stack, 
respectively. That changed with the 
release of 2.6 — there's no 2.7 tree, and 
no plans for one. Tom Hanrahan, direc- 
tor of engineering for 
Open Source Develop- 
ment Labs (OSDL), 
told SD Times, "I don't 
see a 2.8 or 3.0 kernel 
coming down the pike 
anytime soon." 

That's good news for 
developers, who are 
able to focus their 
efforts on their applica- 
tions, instead of worry- 
ing about what the 
underlying operating 
system is going to look 
like in a year or two. At 
this time, what's being 
added to the kernel is 



more about support for new hardware 
than anything else. Although new 
filesystems and other constructs come 
up from time to time, their development 
is much more methodical, compared 
with the "chip-of-the-month" support 
that gadgets require. 

Proof of this is in the changelog for 
the most recent kernel release, 2.6.17 — 
which coincidentally came out as this 
article was being drafted. According to a 
human-readable version of the change- 
log at KernelNewbies.org, hardware- 
related tweaks in this release — what 
KernelNewbies' log classifies as archi- 
tecture-specific and driver modifica- 
tions—totaled 270. 

Everything else — auditing (nine), 
networking (39), filesystems (26) and 34 
changes to the kernel core — accounted 
for 108 changes. A roughly similar pat- 
tern exists in the 2.6.16 changelog, with 
more than twice the number of hard- 
ware reworks, when compared with so- 
called "software." The developers most 
affected by these minor revisions are 
those who write drivers — but any appli- 
cation that reaches into the kernel can 
get tripped up that way. 

The kernel development process 
isn't perfect, and that's due in part to 
the nature of the human beings 
involved. Torvalds has compared it to 
"herding cats," which may be an under- 
statement. There were some rumblings 
back in May from both Morton and 
Torvalds that the 18 or 19 release would 
be a good time to focus on fixing bugs 
in the kernel instead of adding new fea- 
tures and functionality, but currently 
there appear to be no plans for a bug- 
fix-only release. 

Although there's been grumbling that 
the "2.6" part of kernel version number- 
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ing is no longer relevant and should be 
dropped, the fact is that development 
continues on the 2.4 series, albeit at a 
much reduced pace than that of the 
mainline 2.6 kernel. Version 2.4.32 was 
released last November, and a second 
release candidate for 2.4.33 came out 
last month. 

There's probably no way to deter- 
mine how many different tools are used 
to develop the bits that go into the Lin- 
ux kernel; Morton has claimed else- 
where that one-quarter of the submis- 
sions he receives for the -mm tree don't 
compile, so it's clear that vi by itself 
might not be enough. Source code con- 
trol uses "Git," a project begun by Tor- 
valds as an alternative to BitKeeper and 
CVS, that is now maintained by Junio 
Hamano. 

MORE WORK AHEAD 

SD Times spoke with OSDL's Hanrahan 
about the challenges facing the kernel 
developers in the various subsystems. He 
told us, "As far as [the] general direction 
goes, the community continues to try to 
support a wider range of architectures, 
NUMA [non-uniform memory access] is 
still an area of focus that they want to pro- 
vide support for. Work is being done to 
support embedded Linux, work is being 
done to support real time. Those are all 
areas of interest." 

When asked to get into the work tak- 
ing place on various subsystems, memo- 
ry management was the first thing on 
Hanrahan's list. "In addition to the 
NUMA work, there's [promising] work 
being done on fragmentation avoidance 
in the page allocator. Andrew [Morton] 
said this will probably be merged some- 
time this year. Page table sharing is an 
► continued on page 31 
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Red Hat, Novell Step Up 
To Kernel Challenges 




Novell is considering OpenVC for 
virilization, Dryoff says. 



BY P.J. CONNOLLY 

The Linux kernel doesn't operate in a 
vacuum; the rest of the distribution is 
what makes the kernel useful. Although 
Linux has the image of being developed 
by a bunch of unkempt hippies, the fact 
is that most of the serious work — espe- 
cially on the kernel — is contributed by 
the vendor community 

OSDL director of 
engineering Tom Han- 
rahan provided an 
anecdotal perspective 
on vendor support of 
kernel development. 
He believes that 
"roughly 90 percent 
of the contributions 
into the kernel come 
from developers who 
are employed by the 
quote-unquote ven- 
dors. I don't see how 
you can ask the ven- 
dors to do more than 
that; they're really sup- 
porting the community 
tremendously in that regard." 

Holger Dyroff, Novell's vice presi- 
dent of Linux product development, was 
emphatic that the current scheme of 
slipstreaming new advances into the 2.6 
kernel has his backing. That "made it 
much easier to continuously backport 
features as they came along. We've only 
run into one or two features that we 
couldn't backport," he said, referring to 
the practice of applying new patches to 
prior kernel editions. He noted that 
since customers want innovation, and 
they usually want it yesterday, it was bet- 
ter to be able to bring new features and 
functionality in a continuous stream. 

Red Hat CTO Brian Stevens con- 
curred, pointing out that customers won't 
accept excuses. "We have to be able to 
sustain 100 percent of the Linux kernel 
once we deliver it," he said, adding later, 
"at that point, the community at large 
isn't going to resolve your issues." 

Stevens also noted that power in the 
community carries with it responsibility. 
"We tend to drive any changes that we 
plan to deliver in our products upstream 
into the Linux kernel first. In most cas- 
es, we will not deliver kernel technology 
unless we've had broad-scale accep- 
tance into Andrew and Linus' tree[s]," 
he said, referring to Linux kernel main- 
tainer Andrew Morton and creator 
Linus Torvalds. 

Novell is focusing much of its ker- 
nel-related work on the areas of man- 
agement and monitoring, virtualization 
and driver modularization, according to 



Dyroff, who said that more than 25 
people in his organization are making 
contributions to the Linux kernel. He 
went on to describe Novell's proposed 
solution to the driver problem as one 
that "allows anybody, independent [of] 
us, to do their own loadable kernel 
module, including drivers for hardware, 
and provide that to our customers for 
easy consumption." 

Novell in May 
launched a driver de- 
velopment process for 
its S USE Linux distrib- 
utions that permits 
users to create and 
deploy drivers inde- 
pendently of the com- 
pany's kernel update 
cycles. 

Along with the 
ongoing work on the 
Xen hypervisor, Novell 
is considering alternate 
virtualization schemes, 
particularly OpenVC. 
According to Dyroff, 
"It doesn't provide complete isola- 
tion. . .the ability to run different kernels, 
but it allows you to run one kernel in sev- 
eral instances... in one machine." Hard- 
ware costs give OpenVC an advantage in 
some scenarios, said Dyroff. "OpenVC 
lets you share the kernel in memory... 
you can have a smaller footprint that way. 
If you want to do 40 or 50 instances, 
that's quite important." 

"As Red Hat has grown, so has our 
contribution," claimed Stevens, adding 
that "it's harder to find a subsystem 
that we're not contributing to. You can 
pick any area from virtual memory to 
the device space to Xen to filesystems, 
to security, [or the] network stack; if 
we're not the core maintainer, then we 
at least have developers working in the 
community." He did not provide fur- 
ther details. 

OSDL's Hanrahan believes that "in 
general, the vendors have been making 
pretty reasonable decisions about 
where they want to allocate their 
resources." Both vendor spokesmen 
agreed that their working relationship 
with the kernel maintainers couldn't be 
better. Said Stevens: "One thing that's 
been great is that Linus and Andrew 
very much care about what customers 
need. That mindset. . .has opened a dia- 
log that perhaps we couldn't have had 
five years ago." 

Dyroff agreed. "OSDL is doing a 
very good job in holding everybody 
together, [and] making sure nobody 
breaks out on any area." ■ 



www.sdtimes.com 



Software Development Times . July 15, 2006 . 



SPECIAL REPORT 31 



Linux Kernel Maturing, But New Challenges Arise 



< continued from page 29 

important feature for some 
databases. . .this is a really com- 
plex problem, and it's not clear 
there's a viable solution avail- 
able yet." 

Hot-plug memory support 
also continues to present a 
problem, said Hanrahan. "It's 
an important feature, but it just 
seems to have too big an impact 
on the kernel, at least in any of 
the implantations we've seen so 
far." Although adding memory 
works well, "memory hot-plug 
[removal] is still problematic." 

New filesystems are seeing 
mixed support, according to 
Hanrahan. "Reiser 4 continues 
under development; the merge 
is stalled right now due to a lack 
of interest and a lack of 
resources, but that could be 
temporary," he said. 

"ext4 seems to be moving 
along at a better clip, " he con- 
tinued. "There's recently been 
some improvements in perfor- 
mance, some improvements in 
large device scalability. Extents, 
delayed allocation, multiblock 
allocation, 48-bit block num- 
bers and so on are all being 
implemented. The team seems 
to be actively working on it, so 
that's a good sign." 

Monitoring and manageabil- 
ity issues continue to attract 
interest. A team is working on 
adding CPU performance 
counters to the kernel, noted 
Hanrahan, who added that the 
well-supported kprobes is now 
the "basis for a project called 
systemtap, which allows you to 
do some fairly sophisticated 
tracing of the kernel, and that 
seems to be making progress. 
On the dump side, kdump 
seems to have finally been the 
implementation that the com- 
munity has settled on." 

Hanrahan continued, "Re- 
source management seems to 
still have a lot of attention. 
The implementation called 
CKRM [class-based kernel 
resource management] is actu- 
ally starting to get some trac- 
tion now; the core CKRM 
looks really clean according to 
Andrew, and he's ready to put 
it in his tree." 

He noted that other CKRM 
bits weren't quite baked: "The 
CPU controller looks like it's 
going to be OK. Memory con- 
trol is the really tough one that 
continues to be problematic, 
and a lot of work needs to be 
put into it to get it solved. Once 



the memory controller's in 
place, then we think the rest of 
the controllers will line up." 

Drivers remain an ongoing 
struggle, Hanrahan admitted. 
Although serial-attached SCSI 
drivers are proceeding slowly, 



InfiniBand drivers are merg- 
ing into the kernel at a faster 
clip. But he believes that dri- 
ver quality is not getting the 
needed attention. "Work has 
kind of waned in that area; it's 
something that we'd like to see 



if we can rejuvenate again. We 
need to regularize diagnostic 
messages, we'd like to improve 
fault injection for testing pur- 
poses, improve accounting and 
performance metrics. There's 
a lot of work that needs to be 



done on device driver harden- 
ing." 

Overall, though, Hanrahan 
is optimistic: In his view, the 
process is working. If he's 
excited about anything, it's the 
future prospects for the kernel, 
as Asian developers begin join- 
ing the community and making 
more contributions. I 
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EDITORIALS 

Exits Mark the End of an Era 

First, Scott McNealy said he was giving up the CEO reins at Sun. 
Then, Bill Gates announced he was stepping away from his day-to- 
day work at Microsoft. Now, Jim Ready said he will relinquish his posi- 
tion at MontaVista Software. 

While the less-famous Ready was not able to lead his company to the 
heights Sun and Microsoft achieved under their founders and visionar- 
ies, it is interesting to note that all three decided the time was right for 
them to leave, albeit under somewhat different circumstances. 

McNealy had taken Sun to great heights in the 1990s with Java, 
SPARC and its server business, but was unable to return the company to 
profitability after the dot-com crash at the turn of the century. 

Gates was the vision behind Microsoft, which grew to dominate the 
software landscape through the same decade in the client-only and 
client/server era, but was seen as playing catch-up to the rest of the 
industry in terms of the Web (and now, Web 2.0). His future will now be 
in charitable works, not software development. 

And Ready, an iconic figure within the IT industry whose work drove 
the expansion of real-time operating systems, says he'll spend more time 
in technology development, giving the job of growing the company to 
Thomas Kelly. 

These industry leaders played key roles over the past 20-odd years in 
establishing what we have become: Sun and Microsoft in advancing pro- 
gramming languages, operating systems, software tools and the 
client/server platform; MontaVista in driving real-time and Linux into 
embedded operating systems. 

But as the world shifts to application mashups that need to be avail- 
able on multiple platforms with up-to-the-minute data around the world, 
perhaps Gates, McNealy and Ready no longer had the energy it would 
take to keep their companies in the forefront. Perhaps their corporate 
boards shared the same thought. Either way, with their departure, we've 
seen the end of the first real era of ubiquitous computing. 

The Rise of Robotics 

For decades, robotics has been used with great success in the manu- 
facturing sector for improving accuracy and efficiency and for low- 
ering labor costs. Among the more memorable transformations brought 
about by the technology was in the automotive industry, where thousands 
of members of the powerful United Auto Workers union were displaced 
by computer-driven automatons. Cars became cheaper to produce. 

Another industry transformed by robotics — with a far different out- 
come — was consumer electronics manufacturing. The ever-lower costs 
and economies of scale resulted in a revolution not only for the consumer 
benefit of plummeting electronics prices, but of a demand cycle driven 
by an apparently insatiable consumer. And for silicon chip producers, 
automation helps keep prices low as clean-room requirements are easily 
met by hairless arms controlled by automated servos. 

The hardware for building simple versions of these electronic servants 
is available at any large toy retailer or hobby shop. Finding software to 
control them has presented more of a challenge, and easy-to-use pro- 
gramming tools have been all but unheard of. 

That may be changing. Last month, Microsoft declared robotics to be 
the next generation of the PC and unveiled Robotics Studio, a software 
development kit that it says will put the complex world of robotics and 
design into tools that mainstream programmers can use and understand. 
Several major robotics companies already have pledged allegiance to the 
platform. 

A robotics development platform simple enough for mainstream use 
has the potential of simplifying robotic automation not just for the huge 
international conglomerates producing mass quantities through highly 
repeatable processes, but for small companies, universities and the 
home, where robotics can become a part of everyone's daily life. I 



Letters to the Editor 



'REAL SOA' IS NEEDED 

Regarding Larry O'Brien's column, 
"Services Rise to the Surface" [June 15, 
page 33]: Windows Server 2003 is 
already an allegedly "service-oriented 
architecture," in that every time a new 
application is installed, an operating sys- 
tem service must be started or restarted 
or reconfigured to recognize the new 
application and allow it access to various 
OS capabilities. However, just calling a 
module a "service" does not meet the 
basic requirements, which O'Brien 
mentions, of application independence 
and code reusability, the criteria met by 
the prototypical and ideal highly cohe- 
sive, loosely coupled system. 

Unix long since solved the coupling 
and cohesion problem for operating sys- 
tems by identifying those few things that 
absolutely must be part of the OS kernel 
and relegating everything else to re- 
entrant application code. The things that 
an OS must contain are a clock function, 
a swapping/scheduling function and a 
command interpreter. The commands 
themselves, and everything else, can be 
applications that are run by the swapper, 
according to the clock, when called by 
the command interpreter by name, and 
swapped out when waiting for resources 
by the very same swapper/scheduler. 

This was also the rationale behind 
IBM's OS/2 — everything not required 
inside the kernel is excluded from the 
kernel. One "mistake" in Windows is 
putting many I/O and peripheral access 
services in the kernel, where they can 
hang up the whole system. 

The whole DLL business is a kluge 
workaround for the memory limitations 



and addressing limitations of the initial 
Intel 808x processor architecture. 
Microsoft is guilty of DLL proliferation, 
rather than parsimonious management 
of DLLs, for reuse, stability and so forth. 

Compared to some real, heavy-duty 
operating systems (VM, MVS, VMS, 
AIX, OS/400, etc.), Windows is still not 
"good," just "good enough but cheaper." 
Maybe a real SOA would help. 

David P. Vernon 

NEGLECTED NO MORE 

Regarding "Borland Sees JBuilder's 
Future; Fate Uncertain" [June 15, page 
1], one thing that you can't ignore is that 
the development tools generated the cash 
flow for Borland to get into the ALM 
business. 

Once the dev tools are under the 
control of a dev tool company, all or at 
least an increased portion of revenues 
will go back into the company to support 
the dev tools (as well as repaying 
investors). The dev tools have been 
neglected over the past several years as 
resources were shifted to new growth 
areas, but alas this "spinoff is the best 
thing that could happen to dev tools. 
They will get attention and quality 
will be the main focus, not shipping x 
number of units in a quarter so some 
corporate manager can meet a goal for 
bonuses, etc. 

Lou Feliz 

KRM Risk Management 

Letters to SD Times should include the writer's name, 
company affiliation and contact information. Letters 
become the property of BZ Media and may be edited. 
Send to feedback@bzmedia.com. 



Java EE 5 Adoption 
Gaining in Asia Pacific 



DATA WATCH 



Developers along the Pacific Rim are increasingly adopting Java EE 5, according to the APAC 
Development Survey 2006, Spring, released in mid-June by Evans Data. 

Nearly 36 percent of the 390 professional developers interviewed in the Asia Pacific 
(APAC) region said they currently use Java Enterprise Edition version 5— a 200 percent 
increase from the previous survey last fall — and nearly two-thirds said they plan to next 
year, the data showed. 
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Why Architecture Matters 



Organizations are moving away from 
the old world of stand-alone integra- 
tions to todays world of "open" applica- 
tions. After a period of application design 
tied to specific tasks and processes, 
applications are now moving to an open 
platform where human/machine and 
machine/machine interactions 
require the exposure of both 
service and data. This IT strat- 
egy takes advantage of the Web 
as a collaborative platform and 
facilitates data sharing. 

In his book "The World Is 
Flat," Thomas Friedman, The 
New York Times foreign 
affairs reporter, touches on 
this new "application-to-appli- 
cation" paradigm that is driving world- 
wide collaboration. He describes the 
forces that have helped "flatten the 
world," creating multiple forms and 
tools for collaboration across the globe. 

Two trends have helped drive the 
trend toward worldwide collaboration. 
First is the emphasis on the closer align- 
ment of IT to business goals and strategies 
to improve organizational performance. 

The second trend has been the evolu- 
tion from building stand-alone systems to 
integrated system development. Twenty 
years ago, applications were devoted to 
executing a specific task, with an unequal 
emphasis on the manual processes 
required to support it. Not today. Organi- 
zations expect applications to work out of 
the box and exist as part of a greater enter- 
prise environment that involves multiven- 
dor, heterogeneous systems that cross 
organizational boundaries. 

IT technology and architecture are 
evolving to support a new form of collab- 
orative, Web-enabled environment that 
facilities business/IT alignment and inte- 
grated system development. The com- 
plexity inherent in this environment raises 
the issue of how to have the right applica- 
tion with the right features available with- 
in the right time period. This, in turn, 
introduces the concept of architecture. 

Architecture used to be considered 
application development using certain 
internal construction techniques so that 
the application could be maintained. We 
called this application architecture. 

As IT moved to Web-based platforms 
due to the availability of inexpensive com- 
puting platforms and communications 
mediums, such as fiber optics, the IT 
world changed. Applications became part 
of a process of delivering benefits to cus- 
tomers or citizens. The focus became one 
of building composite applications that fit 
into a broader enterprise that includes 
people, processes, assets and systems. IT 
architecture emerged as key in facilitating 
this more collaborative environment. 

This evolution has also raised the 
issue of how to integrate these collabo- 
rations, and thus arose the concept of 




service-oriented architecture (SOA), or 
the coupling of applications in a service 
layer. SOA implementations are mostly 
found in pilot projects. However, it is 
clear that two challenges exist in imple- 
menting SOA: choosing the relevant ser- 
vices and understanding the composite 
application at a higher level 
and tying it to business goals 
(such as interfacing to work- 
flow patterns and processes). 
Without a clear under- 
standing of the impact of 
their choices, organizations 
risk undertaking an SOA 
strategy that doesn't deliver 
the anticipated benefits. 

SOA: ARCHITECTURE'S FUTURE 

Using SOA, organizations can develop 
useful interfaces that are relevant both 
today and in the future. Processes, work- 
flows and choreography are important to 
the successful use of SOA. 

However, organizations should look at 
SOA as a technology that enables archi- 
tecture instead of another new technolo- 
gy to move data. An architectural context 
is required to take full advantage of SO As 
value proposition. A successful architec- 
ture will enable many applications to 
work together and support the easy 
reconfiguration of workflows to meet 
changing market conditions. 

However, organizations face pitfalls, 
including: 

• Undertaking the arbitrary selection of 
services, thus exposing internal data 
unnecessarily. 

• Not allowing for easy reconfiguration 
of applications and workflows as opera- 
tional needs evolve. 

• Building Web applications that treat 
the browser as a user interface without 
providing for the future opportunities 
offered by machine-to-machine or 
browser-less communications. 

A broader enterprise perspective is 
vital in the implementation of SOA 
because it provides the right connection 
points for an applications initial starting 
feature set and, at the same time, delivers 
agility for reconfiguration to allow change 
over time. To respond to change, organi- 
zations need to be able to adjust features 
or change workflows. Possible construc- 
tions built on an architectural foundation 
offer flexibility for applications to inherit 
new types of services over time. 

TYING IT TOGETHER 

To avoid incurring the cost of adopting 
SOA without gaining the long-term bene- 
fits, organizations should consider the role 
of enterprise architecture as a "road map" 
in their SOA implementation. An enter- 
prise architecture enables an IT team to 
understand the relationships among the 
processes, data and IT infrastructure in 
single- and multivendor, multiplatform 



environments. Enterprise architecture 
also moves decision-making beyond the 
engineering perspective, by enabling the 
examination of requirements and applica- 
tion delivery in the broader context of 
business strategies and goals. 

In todays world of Web services and 
SOA, enterprise architecture is essential. 
Organizations must understand how 
their IT projects are transitioning into 
broader enterprise initiatives that pro- 
mote business success. Enterprise archi- 
tecture gives organizations the means to 
analyze their SOA strategy against broad- 
er business goals and understand the 
impact of change over time. The archi- 
tecture delivers a strategic foundation for 
knowledgeable decision-making based 
on facts captured in the repository. 

Enterprise architecture also gives 
organizations the flexibility to assemble 
and analyze applications in the context 
of processes and examine relationships 
at a higher level of complexity. It pro- 
vides a first step toward integration and 
interoperability within and among appli- 
cations, data and processes. 

Many organizations are using the 
Business Process Modeling Notation 
(BPMN) as a standard representation 
for capturing and illustrating higher-lev- 
el processes and details. These models 
can then be visually mapped into the 
execution language, such as BPEL 
(Business Process Execution Language). 

BPEL is the XML glue that binds Web 
services into cohesive units and acts as the 
intermediary that translates business 
process models into execution. The com- 
bination of BPMN and BPEL is emerging 
as a means to architect the business 
process in a distributed environment, sep- 
arating logical from physical implementa- 
tion. Enterprise architecture provides the 
means to utilize these standards within a 
broader enterprise framework. 

ARCHITECTURE MATTERS TODAY 

The movement toward collaboration 
requires migration from discrete IT sys- 
tems into an environment based on 
machine-to-machine communications 
that leverage the power of intranets or 
the Internet using Web services. Enter- 
prise architecture provides an important 
tool for helping organizations use SOA to 
do new things in new ways rather than 
repeating the same old ways using new 
technology. 

Enterprise architecture is the intellec- 
tual component that enables new ways of 
thinking and delivering benefits. The key 
to organizational success is architecture- 
based thinking, which dictates that new 
applications should support a larger 
enterprise goal. By leaving out the middle 
step of architecture, all that is left is the 
new technology without its value proposi- 
tion of agility in managing future 
changes. Architecture is needed to reap 
the benefits of current and future tech- 
nologies in the move to SOA. I 

Jan Popkin is chief strategist for Telelogic. 
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Recycling With the Scrapheap 



Remember when we all learned 
object-oriented programming? How 
we did it because we thought it would 
lead to reuse, which we all knew was vital 
for developing software quickly and 
affordably? Whatever happened to that 
idea? Oh, that's right: It didn't work. 
Object-oriented programming has many 
real benefits, but a snowballing of 
reusable components as an inevitable (or 
even likely) byproduct is not one of them. 

That the road forward for corporate 
development necessarily led to the land of 
reuse was probably the firmest conviction 
of the industry from the 1980s right up 
until the dot-com explosion blew away 
concerns for cost and risk and ushered in 
a decade of new technologies and learn- 
ing curves. The Web was such a clearly 
disruptive technology that it seemed to 
excuse the economic costs of rewriting 
legacy systems, rather than finding a way 
to integrate and evolve them. 

The past decade has brought us design 
patterns and object-oriented frameworks, 
and these things deliver, to some extent, 
the promised benefits of reusability. The 
dream of "never having to write a linked 
list again," at least, has been achieved. 
Putting aside licensing confusion, the 
worldwide base of open-source software, 
and Google's index of Usenet, it's the rare 



programming task that isn't aided by prior 
work. Generally, though, we begin each 
project from the same starting place as 
our previous project: perhaps a blank 
screen, perhaps some wizard-generated 
code, perhaps an empty window sitting in 
a graphical designer. This is not what we 
were promised. 

The most interesting form of reuse 
going on today is the 
"mashup." The term refers to 
Web applications that mix data 
and display applications from 
multiple sources to create new 
services. The most popular 
early foundation for mashups 
was Google Maps, and today 
all the map providers (Google, 
Microsoft, Yahoo) encourage 
developers with documented 
APIs (craigslist and Flickr are 
also popular with mashup authors). To 
some extent, the existence of a docu- 
mented API flies against the mashup 
spirit, since the original mashups were 
done with a combination of JavaScript 
and reverse-engineered HTML. 

Once again, we see high productivity 
emerging from the chaining together of 
fully functional components: the "Pipes 
and Filters" architectural pattern. 

The "twine and bailing wire" nature of 
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the original mashups is no accident. The 
heresy that "Messy is Good" was formal- 
ized by James Noble and Robert Biddle 
in the important 2002 paper "Notes on 
Postmodern Programming" (www.mcs 
.vuw.ac.nz/~kjx/papers/nopp.pdf). The 
statement echoes Richard Gabriel's 
famous formulation that "Worse is Better" 
(www.jwz.org/doc/worse-is-better.html) 
and, as did Gabriel, speaks to 
the pragmatic survival of soft- 
ware, not its theoretical 
charm. In their paper, Noble 
and Biddle detail the creation 
of a "scrapheap" program. 
After deciding to write a pro- 
gram to calculate primes, they 
^f l^ | do a Google search, download 
a C library, but then notice 
that the documentation hap- 
pens to contain the algorithm 
they were looking for, so they just cut and 
paste that into their editor. This com- 
pletes the programming exercise. It is a 
vastly more recognizable approach than 
the world of "software ICs," "reusable 
objects" and "enterprise components 
catalogs" that we hear so much about. 
At OOPS LA last year, Ivan Moore 
and Nat Price ran a workshop on 
scrapheap programming and document- 
ed several interesting observations, 
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including the relative value of examples 
over documentation, source code over 
binary components, and "compose com- 
ponents" over "modify existing applica- 
tions." To my dismay, they also pooh- 
poohed XML; if XML did nothing but 
put to rest the ambiguity of text encod- 
ing, I'd embrace it. You can read more at 
nat.truemesh.com/archives/000555.html. 

Applying these lessons to in-house 
SOA development, one thing jumps out: 
Create smaller, fully functional compo- 
nents rather than trying to architect a 
vast enterprise-spanning system divvied 
into functional areas. This may lead to 
some amount of duplication of effort 
and bobbles in consistency, but overall 
risk will be greatly reduced and you 
open the door for innovative recombina- 
tions of your services. 

The dream of every project building 
upon the last and ratcheting up the 
abstraction of the next is, unfortunately, 
still largely illusory. Object-oriented 
programming does not automatically 
deliver it and neither will service orien- 
tation. Design and architecture remain 
hard. "Messy is Good," though, pro- 
vides a perspective that forgives our 
shortcomings and promotes productivi- 
ty even in the face of our all-too-com- 
mon mistakes. I 

Larry O'Brien is a technology consul- 
tant, analyst and writer. Read his hlog at 
www. knowing, net. 
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Many development teams want to improve their software devel- 
opment processes by leveraging reusable components-but are 
hampered by the lack of source code, or by complex or restric- 
tive licensing terms. Fortunately, Syncfusion's customers have 
access to great source code and documentation, and developer- 
friendly licenses. 

That's just one reason why the company was named to the 
2006 SD Times 100 in the Components, Libraries St Frameworks 
category. Another reason is that while Syncfusion's components 
themselves are impressive, the company's interaction with devel- 
opers really sets them apart from the pack. 

"Essential Studio is a bundle of all of the prod- 

jFj ucts that we have, so it's actually a platform 

in itself," says Stephan Hoenig, president and 

CEO. "The big benefit that they bring to the table 

is creative productivity. Given enough time, any 

development team could replicate some of the features 

that we offer. They could create the latest UI look and 

feel, docking windows, a good control or the editors that 

we offer. However, with our product, they can add all 

of these components in one shot and focus on their core 

business logic." 

Hoenig says that one of the negative aspects of work- 
m ing with components that are purchased from ven- 
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dors is that they are often licensed, meaning that 
the development team doesn't really own them. They have no idea 
what goes on inside them and sometimes just get the primary code 
to plug them into their application. 

One of the strongest benefits of Essential Studio is that the 
source code is completely integrated. When you buy a Syncfusion 
component, you don't give up control. You can still step into 
the source without having to build the whole set of libraries. 

Also, development teams often license components from 
numerous vendors— each with its own conditions and support 
policies. Syncfusion focuses on expanding its own platform so 
that your team can standardize on components from a single 
provider. Right now, the company offers a set of 11 products 
and intends to continually introduce more. 

Support can also be an issue— especially for teams working 
with large bodies of code. Developers often want context-sensi- 
tive samples that are specific to the domain that they are work- 
ing on. This is a support service that Syncfusion undertakes rou- 
tinely, Hoenig says. "You bring us in to give you a productivity 
boost, and whatever it takes, we'll work with you to achieve it." 



LSyncfusion" 

www.syncfusion.com 
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Living With Eclipse: Not Z-End 



Companies whose turf falls in the 
shadow of Eclipse or its nearly infi- 
nite ambitions are all scrambling to find 
ways to respond to the open-source jug- 
gernaut. Their different responses are 
illustrative of varying understanding of 
the market. 

One approach is the join-'em-and- 
hope approach, which makes a lot of 
sense. SlickEdit, maker of a fine program- 
ming editor, opted for this strategy when 
it released an Eclipse plug-in with similar 
functionality to its flagship product. This 
approach has the benefit of retaining the 
current user base. Even if users migrate to 
Eclipse, they can still be customers. It's a 
smart strategy, which could even pick up 
the one-off Eclipse user who is willing to 
pay for a better editor. 

Another approach is to continue inno- 
vating products in the belief that prospec- 
tive customers will recognize their superi- 
ority and choose them over Eclipse. This 
is the approach embraced by JetBrains, 
maker of the IntelliJ Java IDE. Unfortu- 
nately, this tactic suffers from two prob- 
lems: The history of business is marked by 
companies with good-enough products 
that dominated their markets. Being bet- 
ter has never been a recipe for growth, 
although it is a dependable formula for at 
least limited success. The other problem 



is that when competing with free prod- 
ucts, the for-pay tools have to be enor- 
mously better. IntelliJ is a great product 
and superior to Eclipse. However, it's not 
better enough. And so, JetBrains has been 
hurt by its morally pure approach. 

The third option is the one required in 
all business-school scenarios: the do-noth- 
ing scenario. This was Bor- 
land's approach. It did not view 
Eclipse as a threat until too 
late and then announced — 
with feckless enthusiasm — a 
free JBuilder plug-in. Borland 
also crosses over into the previ- 
ous situation of trying to win 
on technical merits. Despite 
being demonstrably better 
than Eclipse, JBuilder was not 
better than the free IDE by a 
significant enough margin. Plus it 
nothing to respond to Eclipse. 

There are other models: Microsoft's, 
with its installed base and no open- 
source competition whatsoever; and the 
free, direct competitors to Eclipse — 
Sun's NetBeans and Oracle's JDeveloper 
(whose exact business model is unclear). 
New models are likely to arise as Eclipse 
rolls into new fields. 

One company has found a new ap- 
proach of embracing Eclipse and making 
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it part of a core strategy: Zend, the prima- 
ry commercial vendor of tools for the 
open-source language PHP. In its present 
business model, Zend has three revenue 
streams: its IDE and development tools, 
its execution platform, and its training and 
professional services organization. With 
tools income being critical to the compa- 
ny's survival, Zend had a dilem- 
ma: how to integrate Eclipse 
into its business model. 

Says Mark de Visser, Zend's 
chief marketing officer: "We 
saw both threats and advan- 
tages in Eclipse. The threat 
was that if we did nothing, 
we'd wind up like other com- 
panies that ignored Eclipse. 
The benefit was that by work- 
ing with Eclipse, we can lever- 
age its existing integration with CVS and 
Subversion, and with many other useful 
developer tools." So, the company took a 
deep breath and began working on a 
PHP plug-in for Eclipse that will ship lat- 
er this year. 

Even though PHP support in Eclipse 
was not likely to be built in anytime soon, 
Zend made an aggressive and, I believe, 
smart move by taking action early. So, how 
will Zend now generate revenue? 

The plug-in, which will be free of 



course, will provide a professional devel- 
opment engine. More-advanced features 
will be available in a separate commercial 
set of extensions to the plug-in. This 
model mirrors IBM's own approach: Big 
Blue's for-pay Rational IDEs are high- 
end extensions to Eclipse. By this deft 
move, Zend expands the universe of PHP 
users via the plug-in and retains the busi- 
ness of customers who were predisposed 
to paying for extra bells and whistles. 

The company will continue to sell the 
execution platform. It is also working 
with the very active PHP community to 
come up with a universal PHP frame- 
work (a sort of Ruby on Rails for PHP). 
PHP has many frameworks, and so Zend 
is looking for a unified implementation. 
As with all its products, the company 
relies very much on its good relationships 
with the open-source community in 
developing the framework. And so, with 
the framework will ship additional for-pay 
extensions developed by Zend — again 
using the model it employs with Eclipse. 

By embracing Eclipse and making it a 
key part of its strategy, Zend is showing 
how to make the integration work. Its per- 
ceptive play, no doubt, derives from its 
long history of working with the open- 
source community. I expect its approach 
will serve as a template for other develop- 
er tool vendors. I 

Andrew Binstock is the principal analyst 
at Pacific Data Works. 
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Serena Software 

Technology is always in a state of flux. Mainframes are replaced 
by clusters, operating systems are added or discarded, causing appli- 
cations and processes to change rapidly to maintain a competi- 
tive edge. But small changes can have wide-reaching impact— and 
large changes can be hard to plan, manage and execute. That's not 
a problem for Serena Software, named to the 2006 SD Times 100 
for Software Configuration 8t Change Management: Helping com- 
panies control change is what they do best. 

"Serena originally helped customers manage changes to appli- 
cations for IBM mainframes," says Mark Woodward, president and 
CEO. "Around 2000, we transformed into an enterprise change man- 
agement provider to help customers with the devel- 
Pj< opment deployment process for applications on 
kj^ virtually any platform." 

Woodward adds, "More importantly, we addressed 
applications that run across multiple platforms. For 
example, there may be a legacy component on the main- 
frame, and there may be a large Unix server in the middle 
and a Windows front end, but all of these technologies need 
to work together as part of a single application." 

Serena enables companies to successfully control change 
by delivering Change Governance solutions that extend soft- 
ware change management to the enterprise. Many enter- 
prises already have processes and tools to manage 
change to an application, server configuration or net- 





SDH 



2006 



11001 



work-but they are individual tools focused on silos 
within the organization. Serena's products and services orchestrate 
changes across silos. And Serena enables the adoption of practices 
and processes to be sure those changes are implemented effective- 
ly, accurately and appropriately. 

The company offers a wide range of Change Governance solu- 
tions-everything from application life cycle management to oper- 
ations process management— to help companies control change 
resulting from regulatory compliance, best practices, globaliza- 
tion, competitive pressures, mergers and acquisitions, and more. 

"Companies that rely on a traditional change management 
approach face high costs, poor quality and excessive risk," 
Woodward says. "Serena's Change Governance solutions remove 
the risks and increase the benefits of change by enabling cus- 
tomers to visualize, orchestrate and enforce change across the 
enterprise. Our approach bridges enterprise silos and creates a 
common frame of reference for business and IT." 

He continues, "Virtually any company that has the need to con- 
trol processes or changes within information technology should 
come to us, because companies can leverage change to realize trans- 
formative business results. With 25 years solely focused on change, 
we are the Change Governance specialists." 
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Test-driven development (TDD) — 
where you write the tests before you 
write the code, and run the tests every 10 
minutes or so as you're coding — is some- 
thing everyone should be doing. Not only 
does TDD make the code go together 
faster with fewer bugs, but it also takes a 
lot of tension out of day-to-day program- 
ming tasks. The worst-case scenario 
when you introduce a bug is throwing 
away the last 10 minutes of work. 

To practice TDD, however, you need 
an easy-to-use automated test environ- 
ment, ideally one that can be cus- 
tomized for the work at hand. For exam- 
ple, you may want to run only a small set 
of localized tests every 10 minutes, with 
a more thorough, but slower, test pass 
every hour or so. 

JUnit has been the standard for this 
sort of testing, but JUnit has its problems. 
Its difficult to set up JUnit to run several 
disconnected tests in a single run, for 
example. There's also no easy way to 
chain tests (where a test depends on the 
success or failure of a previous test — 
JUnit test methods each run in their own 
objects, even if they're declared in the 
same class, so they can't easily interact 
with one another). You also can't get fine 
control over which tests run, so it's diffi- 
cult to customize a test suite to the code 



TestNG Is A-OK 



you're working on right now. 

I also have mixed feelings about 
JUnit's insisting on putting test methods 
in special test classes. On one hand, the 
separate-class approach lets you exclude 
the tests from the shipped code. Just 
omit the .class files. On the other hand, I 
get nervous when the tests and the code 
aren't in the same class defin- 
ition. It's too easy to not add a 
test when you add new code. 

There is an alternative to 
JUnit that fixes these problems: 
TestNG (www.testng.org), a 
test framework written by 
Cedric Beust and ported to Java 
1.4 by Alexandru Popescu. 
(There's a testing tutorial at 
membres.lycos.fr/testng. ) 

TestNG leverages Java 5 
annotations to tag normal methods in 
your classes as tests. (A JDK 1.4 version 
does the same with javadoc-style com- 
ments.) The test methods can be in their 
own classes, but don't have to be. A sepa- 
rate XML file specifies which classes (or 
packages) to test, and which tests to run 
within these units. (A "test" is different 
from the method that implements some 
or all of the test. Methods are added to 
named tests by specifying the test name in 
the annotation that tags the method defin- 




ition.) You have very fine control over the 
composition of a test run, and it's easy to 
configure a run for a specific situation. 

Like JUnit, TestNG integrates nicely 
into Eclipse, IDEA, Maven and Ant. You 
can also easily modify the actual test-run- 
ner program to accommodate special test 
scenarios or even run TestNG from a sep- 
arate program. 

Though I think TestNG is 
better than JUnit, it's not with- 
out flaws. I hate the syntax of 
the XML configuration file. 
Everybody seems to have for- 
gotten how to build special- 
purpose small programming 
languages using tools like 
YACC. Small languages are 
TO -ft i f\ good. They're easy to write, 
~^^"^ easy to learn, and let you 
express targeted semantic concepts in 
simple ways. Using them, you can get 
work done faster. 

A myopic focus on XML, however, 
results in a host oihad XML-based pro- 
gramming languages. You must express 
simple concepts with ungainly globs of 
angle brackets, attributes and other syn- 
tactic garbage. Imagine having to do all 
your programming in XML rather than 
Java. Your programs would be two 
orders of magnitude larger, impossible 



to read and impossible to maintain. 
XML is good for absolutely nothing 
except data description, and it's not par- 
ticularly good at that if you care about 
things like bandwidth. 

The worst example of this XML-as- 
programming-language stupidity is Ant, 
which is nothing but a very hard-to-read 
scripting language. Everything that you 
can do in Ant, you can do better with 
any number of shell languages (Bash, 
Korn, Bean, etc.), any of which could be 
made platform-independent with a sim- 
ple port to Java. 

Returning to TestNG, most of the 
complexity in TestNG is in writing the 
XML configuration file that describes 
how your tests should run. This file is a 
perfect example of a place where a 
focused test-description language would 
excel. To me, the XML file is a serious 
wart in an otherwise good program. A lot 
of what's expressed in the XML could be 
expressed directly in the annotations, 
with no need for a test script at all. Com- 
plex testing situations should be 
expressed in a purposed scripting lan- 
guage, not in XML. 

That said, I think that TestNG 
does offer a few significant advantages 
over JUnit. It's certainly worth serious 
consideration. I 

Allen Holub is an architect, consultant 
and instructor in C/C++, Java and OO 
Design. Reach him at www.holuh.com. 
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iTKO LISA 3 Complete SOA Testing Platform allows develop- 
ment and QA teams to collaborate on testing at every phase of 
the SOA development life cycle— from early unit and function- 
al tests, to regressions, to using the same test cases continuously 
for load testing and performance monitoring. Indeed SOA qual- 
ity is the specialty of iTKO, named to the 2006 SD Times 100 for 
Test, QA St Performance Management. 

"LISA tests SOA applications at both the system and 
component level, including Web apps, Web services/SOAP, 
messaging layers, databases, J2EE, .NET and more," says John 
Michelsen, chief architect and founder of iTKO. "It is the only 
single solution that automates testing across 
multiple middle-tier technologies. LISA is also 
highly extensible, making it easy to 'test 
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instrument' custom-developed components and 
applications." 

Encapsulation of services in an SOA makes apps eas- 
ier to build, but harder to test as components become 
more flexibly deployed and opaque to testing tools. LISA 
strives to solve this issue in three ways: 

• LISA is a Test Client interface to almost any middle- 
tier component, allowing live interaction with every 
system under test much earlier in development. 
\ 
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Test harness functionality offers developers a quick 
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way to extend testability by either embedding LISA APIs into 
custom components for self-diagnosis, or by creating a custom 
node to "teach" LISA to talk to your application. This defeats 
the "black box" effect of trying to diagnose the root causes of 
missed requirements within services-based workflows. 
• Tight integration with major ALM suites is provided for build, 
deployment, install and configuration management. LISA can act 
as a "quality gateway" for each phase of a development project. 
LISA'S declarative testing model provides a point-and-click 
interface, so users never have to write or maintain test scripts. 
Since services-based applications constantly change, LISA main- 
tains the business context of each test, allowing tests to survive 
and return value to the testing process. 

Michelsen explains that iTKO's company mission and 
product approach are one and the same: "Everyone should own 
quality. This tenet is inherent in everything iTKO offers to 
customers. We'll help test your entire business workflow as it 
crosses all the different technologies you need to touch in a 
services-oriented world." 



OiTKO 



www.itko.com 
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Beyond AJAX 



Industry Watch 
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As technology uptake goes, the inves- 
tigation and adoption of AJAX 
toolkits and technologies has been noth- 
ing short of remarkable. Within the past 
year and change, AJAX has gone from a 
well-known housecleaning product to a 
set of technologies with a variety of def- 
initions for creating richer Internet 
applications. In fact, one could argue 
that AJAX has marked the tip- 
ping point for interest in rich 
Internet applications. 

There are quite a few rea- 
sons that RIAs are only now 
gaining a full head of steam. 
Among them is that the origi- 
nal markup languages that 
predated AJAX were propri- 
etary and there was no con- 
sensus "standard." Further, 
the early solutions required a 
client to be installed, limiting the 
breadth of distribution, or the use of 
Microsoft IE, which also was a propri- 
etary solution. But then, RIA solution 
providers figured out that by taking 
advantage of the Flash player from 
Macromedia (now Adobe), they could 
gain broader reach and provide an alter- 
native to IE. 

So, if AJAX was the tipping point for 
RIAs, what was the tipping point for 
AJAX? If you ask David Boloker, chief 
technology officer for IBM's Emerging 
Internet Technology Software Group, 
the answer can be summed up in one 
word: Firefox. 

"With Firefox came a tremendous 
number of other runtimes," said Boloker, 
who sat down for an interview with SD 
Times at the Real- World AJAX seminar 
in New York City in early June. "Now 
you have an RIA, deliverable to an open- 
source browser, with no footprint, and a 
total cost of ownership close to zero." 

There are problems with AJAX, to 
be sure. For one, there is no clear 
industry consensus yet as to what AJAX 
comprises. JavaScript brings a different 
programming paradigm that is unfamil- 
iar and unwieldy to object-oriented 
programmers. 

Many in the industry acknowledge 
AJAX's shortcomings, and have 



launched efforts to fill out the technolo- 
gy. Sun, Google and others are working 
to bring the Java programming language 
into AJAX. Microsoft is emphasizing the 
"user experience" in its marketing mate- 
rials for its development tools and 
servers. It has been working on its 
"Atlas" AJAX project, but has yet to 
release many details. 

IBM is leading an effort 
called the OpenAJAX Alli- 
ance, which now counts 35 
member companies that are 
working to define AJAX and 
educate the industry. 

Adobe, with the Macro- 
media technology it acquired, 
is bridging its Flex and Flash 
environments with AJAX to 
add JMS-like publish/sub- 
■**■>+* scribe messaging and real- 
time compilation. It also is working on a 
project called "Apollo" that it is describ- 
ing as a universal client that can handle 
Flex and Flash content, documents, 
HTML, video and more. With that kind 
of talent looking to define and extend 
AJAX, it's clear that it's here to stay. 

What's also clear is that it's easy for 
business executives to see the advan- 
tages of rich Internet applications, 
which is also driving the frenetic uptake 
of AJAX. Companies want applications 
that are more responsive, more intu- 
itive and just plain better-looking and 
easier to work with. As Boloker said, 
"The industry is trying to figure out 
how to catch up to itself. We're seeing 
collisions of technologies folks thought 
were all over the place. XML and SOA 
were about how to get my business to 
connect to yours. Now it's about situa- 
tional apps, and enterprise-based 
mashups. Using AJAX, SOA, open- 
source components. . .there's a smorgas- 
bord of technologies within a browser 
container." 

At the recent Microsoft Tech-Ed 
conference in Boston, senior vice presi- 
dent of the server and tools business 
Bob Muglia talked about the Expression 
tool suite, which will ease the handoff 
between application designers and 
developers while taking advantage of the 



Windows Presentation Foundation 
framework "to build an immersive expe- 
rience for the customer." 

So the vision for rich Internet appli- 
cations begat AJAX. But AJAX is only 
one part of the grand vision for appli- 
cation user experience and business 
value. Next comes the convergence 
that will bring applications to the Web 
that leverage the robustness of 
client/server, the flexibility of Web ser- 
vices and the responsiveness necessary 
to drive business. 

Exciting times, indeed. I 

A PAPER BLOG... 

Watching nearly 10,000 people sit 
down to a meal in the great hall of the 
Boston Convention & Exhibition Cen- 
ter during June's Tech-Ed conference 
was a sight to behold. Tables of eight 
stretched for what looked like two 
football fields. At one of them during 
a lunch, a bleary-eyed attendee 
from South Carolina explained how 
Hotels.com had fouled up his reserva- 
tion, and he was nearly forced to sleep 
in his car before finding a room on the 
deep outskirts of Boston late the first 
night. Hotels.com did offer him a full 
refund, he said . . . The lines at the rest 
rooms were reminiscent of a Yankees 
World Series game or a Grateful Dead 
concert. There were half-empty beer 
bottles left on urinals, and even more 
unmentionable things left in the stalls. 
BCEC needs a better cleaning service 
when it's hosting that many people . . . 
Too many sessions had too few people 
in them. Microsoft did such a good job 
providing food, television screens 
tuned to the World Cup soccer tourna- 
ment, a conference store, and shuttles 
to points all around the city, that a num- 
ber of speakers were left talking to a lot 
of empty chairs . . . The exhibit hall was 
quite lively, with the usual flying 
saucers, T-shirts, squeezie-ball give- 
aways and drop-dead gorgeous girls 
cooing at passersby to stop at their 
booths. The blonde in the booth next to 
the BZ Media booth deserves a raise for 
singlehandedly driving a ton of traffic 
there. I'll admit, though, that I didn't 
notice the name of the company. 

David Rubinstein is editor-in-chief of 
SD Times. 



Rally Software Development closed a US$8 million Series B round of 
financing. Leading the funding was Vista Ventures, an investment group 
focused on early-stage technology companies in the Rocky Mountain 
region. Additional sponsors were Mobius Venture Capital and Boulder 
Ventures, which invests in start-up and early-stage companies. Proceeds 
will help Rally in its efforts to have customers adopt and scale agile soft- 
ware development . . . Strikelron, provider of plug-and-play Web ser- 
vices, acguired DesertSoft's Web services operating unit. Strikelron 
added DesertSoft's e-commerce, CRM and online procurement Web ser- 
vices to its portfolio. Strikelron will allow DesertSoft to integrate Web 
services from multiple vendors, use a centralized and automated billing 



system, and have access to tools such as Strikelron's Web Services Ana- 
lyzer and to integrated ISV partner solutions. 

EARNINGS: Seagull Software reported 19 percent growth for the fiscal 
year ending in 2006. "Revenue is up in all geographies; the three acguisitions 
we completed since April 2005 are materially contributing to our perfor- 
mance," said Don Addington, Seagull's CEO and president. For the year, revenue 
rose to US$27.7 million, compared with revenue of $23.4 million for the prior 
year. License revenue for 2006 was $11.7 million, an increase of 21 percent from 
the $9.7 million reported in fiscal 2005. Net loss for 2006 was 1 cent per share, 
compared with a net loss of 12 cents per share in the previous year. I 



CALENDAR OF EVENTS 



Agile 2006 

Minneapolis 
AGILE ALLIANCE 

www.agile2006.com 



July 23-28 



Open Source Convention July 24-28 

Portland, Ore. 
O'REILLY MEDIA 

conferences.oreillynet.com/os2006 



SIGGRAPH 

Boston 

ACM SIGGRAPH 

www.siggraph.org/s2006 



July 30-Aug. 3 



SCO Forum 

Las Vegas 
SCO 

www.sco.com/2006forum 



Aug. 6-9 



Worldwide Developers 
Conference 

San Francisco 
APPLE COMPUTER 

developer.apple.com/wwdc 



Aug. 7-11 



LinuxWorld 
Conference & Expo 

San Francisco 
IDG WORLD EXPO 

www.linuxworldexpo.com 



Aug. 14-17 



EclipseWorld 2006 

Boston 
BZ MEDIA 

www.eclipseworld.net 



Sept. 6-8 



VSLive Sept. 10-13 

New York City 

FAWCETTE TECHNICAL PUBLICATIONS 

www.ftponline.com/conferences/vslive/2006/newyork 



SD Best Practices 
Conference 

Boston 
CMP MEDIA 

www.sdexpo.com/2006/sdbp 



Sept. 11-14 



High Performance Sept. 18 

on Wall Street 

New York City 

LIGHTHOUSE PARTNERS & FLAGG MANAGEMENT 

www.highperformanceonwallstreet.com 

Application Sept. 25-27 

Development Summit 

Phoenix 
GARTNER 

www.gartner.com/2_events/conferences/ad8.jsp 



Embedded Systems 
Conference Boston 

Boston 
CMP MEDIA 

www.embedded.com/esc/boston 



Sept. 25-28 



Intel Developer Forum 

San Francisco 
INTEL 

www.intel.com/idf 



Sept. 26-28 



Open Source Summit Sept. 27-28 

Phoenix 
GARTNER 

www.gartner.com/2_events/conferences/os2.jsp 

Software Test Nov. 7-9 

& Performance Conference 

Boston 
BZ MEDIA 

www.stpcon.com 

For a more complete calendar of U.S. software 
development events, see www.bzmedia.com/calendar. 
Information is subject to change. Send news about 
upcoming events to events@bzmedia.com. 
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JHFRASTiflUCTURE LM 

_DAY IS: This project is out of control F The devsldpniejit 
team's trying -bo write <spps supporting p service 
oriented architecture. . .but it's taking FOREVER! 

DM lb: Gil has ^esorted to giving the tea* coffee IVs, 
No* they're on Java while us trig JAVA. Gh t tne iror.y. 

_DAY 18; T'uh found a better way; IBM Rational, It'i g 

modular software dcvelqprotrvt plotfora based an Eclipse 
that helps the tean model P assemble, deploy and manage 
SOA projects, Ttie whole process is simpler, faster 
and all oqr apps arc flexible md reusable. :) 

_The teem says it's nice to taste coffee again t but 
drinking it is sqqq inefficient! 

























Rational 



Download tiie IBM Softy/are Architect Kit at 
l8M.COM/TAKEBACKC0NTRQL/FLEXtBLE 
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Automated 

Build Studio 

simplify your deployment 



Automated Build Studio is the perfect 
tool for building and releasing our 
software and it makes my working day 
so much easier 

Bart Roozendoal 
SEVENSTEPS 



X 



^ 



r 



I VISUAL MACRO CREATION 

Just drag and drop operations 
and set parameters 



POPULAR TOOLS SUPPORT 

Built-in support for more 
than 400 build and deploy 
operations 



I SIMPLIFY BUILD PROCESSES 

Eliminate manual operations 
and complicated scripts 



I REMOTE WEB INTERFACE 

Launch and monitor builds 
securely from any web 
browser 




I DETAILED REPORTS 

Executive overview 
and detailed logs via 
the desktop client or 
web browser 



I VISUAL STUDIO INTEGRATION 

Run stand-alone or integrated 
with Microsoft Visual Studio 



I ONLINE ALERTS 

Notify developers, testers 
and managers with 
instant messaging, email, 
text/sms 



I CUSTOM OPERATIONS 

Easily create new operations 
with the comprehensive SDK 



Automated Build Studio is a release management system that provides an easy and 
visual way to automate the software development build and deployment process. 
Create visual macros with drag and drop pre-built operations. More than 400 built-in 
operations are included for most popular tools. 



$349.99 

Named user license 

Concurrent & site licenses available 

60 Day Money Back Guarantee 
Unlimited Online Support 
Free Evaluation 




DOWNLOAD A FREE TRIAL 
www.automatedqa.com/abs/sdoffer/ 



AutomatedQA 

test, debug, deliver! 

702-891-9424 



